Cybersecurity
Password Reset Methodology
密码重置与用户注册/越权修改方法论。当目标存在忘记密码/密码重置、验证码回显、校验绕过、任意用户密码修改、越权注册（registersysuser、goedituser 等接口）、thinkphp 商城登录短信验证码等场景时使用。覆盖密码重置链路分析、验证码回显/爆破、短信验证码绕过、任意用户密码修改与越权注册、spring 类 .do 接口鉴权绕过（login_tologin.do 等）与授权边界
- Publisher / source
- wgpsec/AboutSecurity (found on GitHub top repositories)
- Upstream record
- wgpsec/AboutSecurity
- Version
- Version 1
- Published
- Publication review
- Approved for publication · recorded passed scan 2026-11-07
- Content fingerprint
a016f8cdbacc26502ae7f96f7b2e0e08cd5f90fc0dc90939097d55f4042e3157