email-header-injection

Email header injection exploits user input fields to manipulate SMTP headers by injecting CRLF sequences. This skill detects spoofing in contact forms and password reset flows by validating whether injected headers alter the email structure and bypass authentication alignment constraints.

Email header injection exploits user input fields to manipulate SMTP headers by injecting CRLF sequences. This skill detects spoofing in contact forms and password reset flows by validating whether injected headers alter the email structure and bypass authentication alignment constraints.

Email header injection allows attackers to manipulate SMTP headers and spoof sender identity by injecting CRLF sequences into user-controlled fields like contact forms. This skill validates whether injected headers alter email structure and bypass SPF, DKIM, and DMARC authentication alignment.

Yes, this skill tests password reset and invite flows by injecting CRLF sequences into user-controlled fields mapped to SMTP message construction. It validates whether injected headers alter email structure, routing, or authentication alignment in these critical flows.

Payloads for BCC stacking and Reply-To manipulation inject CRLF sequences into header fields to add hidden recipients or redirect responses. This skill generates and iterates these payloads across header and rendering boundaries to confirm email structure alteration and phishing amplification.

You should not rely on email header injection when strict SPF, DKIM, and DMARC policies are enforced and properly aligned, as spoof delivery will likely fail. This skill evaluates those authentication constraints to determine whether spoofing impact is actually feasible.