domains / families / security / testing-for-email-header-injection

testing-for-email-header-injection

separate

Tests web application email functionality (contact forms, password reset,

When to use

• When testing contact forms, feedback forms, or "email a friend" functionality
• During assessment of password reset email functionality
• When testing newsletter subscription or notification email systems
• During penetration testing of applications that send emails based on user input
• When auditing email-related API endpoints for header injection

Skill page

Source