Reset Me Maybe

Challenge Question

The password-reset flow emails a link to the user, but the server decides where that link points based on something the client sends along with the request. That is a classic case of an application trusting input it shouldn't. Abuse it so that the admin's reset link lands on you, and take over the account. This is a live challenge with its own isolated instance.