Host Header Injection — Password Reset Poisoning Audit

Hard GIAC GWEB cybersecurity drill: You are a Web Application Penetration Tester for MemberFlow, a community platform with 1.4M users. During a grey-box