general
Blog post
Splitting the email atom: exploiting parsers to bypass access controls
Source: PortSwigger Research · Published · Last checked 3 hours ago ·
Publisher excerpt From PortSwigger Research
Some websites parse email addresses to extract the domain and infer which organisation the owner belongs to. This pattern makes email-address parser discrepancies critical. Predicting which domain an
Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.
Reference: PortSwigger Research — portswigger.net ↗