Skip to content

Add offensive-email-injection skill - #56

Open
rudycelekli wants to merge 1 commit into
SnailSploit:mainfrom
rudycelekli:skill/offensive-email-injection
Open

rudycelekli wants to merge 1 commit into
SnailSploit:mainfrom
rudycelekli:skill/offensive-email-injection

Conversation

@rudycelekli

Copy link
Copy Markdown

Summary

  • Adds an authorized-assessment skill for SMTP and email-header injection, separate from HTTP CRLF / response splitting.
  • Covers To, Subject, and contact-form fields, with a defender view that rejects CR/LF and uses structured recipients.
  • Updates the skill index, changelog, and generated manifest.

Test plan

  • python3 tools/build_manifest.py reports skill_count 80 and includes offensive-email-injection once

`offensive-email-injection` (web) — SMTP header injection: newlines in To, Subject, and contact-form fields, plus a defender view that rejects CR/LF in header values and uses structured recipients.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant