Password Reset Bypass

This password reset functionality has multiple vulnerabilities:

• Predictable reset tokens (sequential pattern: RST000XXX)
• Weak security questions with easily guessable answers
• No brute force protection on security question answers
• Information disclosure about account existence

Your goal is to reset the admin user's password and access their secret data by exploiting these vulnerabilities.

Learning Objective: Understand the importance of secure password reset mechanisms and why security questions are considered weak authentication.

Request a password reset first to get a token.

Answer the security question to unlock password reset.