Account recovery security case study

A password-reset backdoor exposed every level of account

An anonymized account recovery case study by Somtochukwu Okoma covering exposed reset information, user enumeration and administrative account takeover.