dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added more hints to password reset 5 lesson. Recommended Burp as a proxy

Browse Source
This commit is contained in:
Benedikt - Desktop
2018-12-09 16:43:17 +01:00
committed by Nanne Baars
parent 8c7eaf87d6
commit 3d7974aa45
3 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
webgoat-lessons/password-reset/src/main/resources/lessonPlans/en/PasswordReset_host_header.adoc
View File

@ -12,7 +12,7 @@ The time out is necessary to restrict the attack window, having a link opens up
== Assignment
Tom always resets his password immediately after receiving the email with the link.
Try to reset the password of Tom (tom@webgoat-cloud.org) to your own choice and login as Tom with
that password. Note: it is not possible to use OWASP ZAP for this lesson.
Tom always resets his password immediately after receiving the email with the link.