writeups.xyz / Beyond the @ Symbol: Exploiting the Flexibility of Email Addresses For Offensive Purposes

Submitter : c2a

Date: 7 June 2024

Bounty : undisclosed

Vulnerabilities :

• OS Command Injection
• Stored XSS

Programs :

• MailCleaner

Authors :

• Michael Imfeld
• Pascal Zenker (@Parzel2)

Link :
https://modzero.com/en/blog/beyond_the_at_symbol/