Double parameter (aka. HPP / HTTP parameter pollution): [email protected][email protected] Carbon copy: [email protected]%0a%0dcc:[email protected] Using separators: [email protected],[email protected] [email protected]%[email protected] [email protected]|[email protected] No domain: email=victim No TLD (Top Level Domain): email=victim@xyz JSON table: {“email”:[“[email protected]”,”[email protected]”]}...
