Collected research
Abusing autoresponders and email bounces
Autoresponders and delivery bounces return the attacker's own message together with internal details. Filling a Google Drive owner's mailbox made the access-request mail, sent from the attacker's address, bounce back with the owner's address and document title, and a strict DMARC policy on an attacker domain forces a forwarder to bounce and expose the hidden downstream address.
Record
- Researcher
- Inti De Ceukelaire
- Published by
- Medium
- Date
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Inti De Ceukelaire, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .