testing-for-email-header-injection

Email header injection is a web security vulnerability where attackers manipulate email headers using CRLF characters in user input. This skill automates CRLF payload testing across contact forms and APIs to detect and validate such header manipulation risks.

To test for email header injection, run this skill against your target URL. It automates field-level tests across contact forms and JSON APIs using multiple CRLF and URL-encoded payload variants, generating a structured report of findings.

Yes, you can test JSON APIs for CRLF injection vulnerabilities. The skill applies automated header injection tests across endpoints that accept user input to influence email headers, covering both contact forms and JSON APIs.

The best way to automate security testing for header manipulation is using this skill, which applies multiple encoding variants and CRLF payloads to target endpoints. It ensures safe input handling while generating actionable remediation reports.

Yes, you need the requests library installed as a dependency to run these email header injection tests. The skill uses it to send automated CRLF payloads and URL-encoded variants to target URLs for vulnerability validation.