Ransacking your password reset tokens

We demonstrate how the popular "Ransack" library (Ruby on Rails) can be abused to exfiltrate sensitive data via character by character brute-force, allowing for a full application compromise in some cases. An internet wide search identifies several hundred potentially vulnerable applications.

application applications brute brute-force cases compromise data internet library password password reset popular rails reset ruby ruby on rails search sensitive data tokens vulnerable