business-logic 2 Defeating custom password reset tokens May 16, 2023 HackTheBox - Delivery May 22, 2021