This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Testing for weak password change or reset functionalities (OWASP-AT-011)
From OWASP
Redirect page