TDA / Ruby-Mailcheck

Proof of concept for E-Mail header Injection in Ruby

Proof of concept for E-Mail header Injection in Ruby

• Simple to reproduce attack, construct a http request with the following contents:

  • method = 'post'
  • params = { email = [e-mail]%0abcc:[e-mail] }

• Make sure to construct the http request using curl (if you are ok with command-line), or with Postman (Chrome), or HTTPRequester (Firefox), this is to prevent the browsers from double encoding the strings you send.

• For more info on E-Mail Header Injection, check out my thesis docs: Thesis on E-Mail Header Injections.