> For the complete documentation index, see [llms.txt](https://kathan19.gitbook.io/howtohunt/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kathan19.gitbook.io/howtohunt/password-reset-functionality/password_reset_token_leakage.md).

# Password Reset Token Leakage

Password Reset Token Leakage

```
Steps:
1.Sent a password reset request using forget password
2.Check your email 
3.copy your reset page link and paste in another tab and make burp intercept on.
4.Look for every request if you find similiar token that is in reset link with other domain like: bat.bing.com or facebook.com
5.Than there is reset password token leakage.
```

## Authors

* [@Virdoex\_hunter](https://twitter.com/Virdoex_hunter)