Reset · Glitcher University

Reset your password

Objective Take over another account (e.g. dean) via the password-reset flow.

💡 Show hint

The reset token is md5(username) and never expires. Compute dean's token and set a new password without access to dean's mailbox.

FlawReset tokens are guessable (hash of the username) and don't expire. FixUse random, single-use, expiring tokens tied to the account.