Post by @declanmidd

🚨 I Found a Password Reset Vulnerability! | VulNyx CTF (University) In this clip from my previous livestream, I discovered an information disclosure vulnerability during an authorized VulNyx CTF. While analyzing the password reset functionality with Burp Suite, I noticed the server was returning the generated recovery code directly in the HTTP response a serious security design flaw if implemented in a real application. 🛡️ This clip is for cybersecurity education and demonstrates why sensitive values should never be exposed to the client during password recovery workflows. ⚠️ Disclaimer: All testing was performed in an authorized CTF/lab environment for educational purposes only. Never perform security testing on systems without explicit permission. #CyberSecurity #EthicalHacking #BurpSuite #WebSecurity #InfoSec