…email address.
2️⃣ Click on the password reset link.
3️⃣ Don’t change the password immediately.
4️⃣ Click any third-party website (e.g., Facebook, Twitter).
5️⃣ Intercept the request in Burp Suite Proxy.
6️⃣ Check if the Referrer header is leaking the pass…
