Hack Forums
Spruz Unauthenticated Password Reset Vulnerability [0day] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Spruz Unauthenticated Password Reset Vulnerability [0day] (/showthread.php?tid=5364982)



Spruz Unauthenticated Password Reset Vulnerability [0day] - slthrp - Aug 5, 2016

Code
Spruz 0day Discovered by Slothrop
aHR0cDovLzBkYXkudG9kYXkvZXhwbG9pdC8yNTg0Ng== (base64)

This 0day works on all spruz websites assuming you can find the admin ID. I even used it to deface spruz.com 🤝


* - Hackoo - Aug 5, 2016

Amazing contribution man, keep it up.


* - Wireless Network - Aug 6, 2016

I just went on their official site and it got rekt while i was browsing it.


* - slthrp - Aug 7, 2016

Thanks for the feedback :)