Challenge:
Name: Reset Bender’s Password
Description: Reset Bender’s password via the Forgot Password mechanism with the original answer to his security question.
Difficulty: 4 star
Category: Broken Authentication
Expanded Description: https://pwning.owasp-juice.shop/part2/broken-authentication.html
Tools used:
Burp Suite, FoxyProxy
Resources used:
Hundreds of hours of watching Futurama.
Methodology:
The first step here is clearly to figure out what the security question is.
In Season One Episode One of Futurama, Bender attempts to kill himself in a Stop ‘n’ Drop Suicide Booth because he found out that the girders he had been bending at work were used to build suicide booths. From there, it was just a matter of finding out the exact string construction of his security answer. To Burp Suite!
Now just submit that string in the Forgot Password form and reset Bender’s password!
Prevention and Mitigation Strategies:
Curiosity Kills Colby 