Email Parsing Vulnerabilities at DEFCON 32 | 14min snip from Critical Thinking

Episode 85: Practical Applications of DEFCON 32 Web Research

Critical Thinking - Bug Bounty Podcast

CHAPTER

Email Parsing Vulnerabilities at DEFCON 32

This chapter examines recent research from DEFCON 32 by the PortSwigger team, emphasizing the complexities of parsing email addresses in accordance with RFC 2822. The discussion highlights security implications of encoding techniques that can lead to SMTP injection vulnerabilities and explores their broader applications in internet protocols. Listeners are offered insights into practical exploit tactics and the significance of understanding various encoding standards to identify and mitigate potential security risks.

00:00

Transcript

Play full episode

Remember Everything You Learn from Podcasts

Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.