How I Discovered an Email Disclosure Vulnerability

FREE ARTICLE

Hello Everyone!

Today, I’m excited to share how I discovered an email disclosure vulnerability. Buckle up because this one was quite an interesting find!

I was searching for a program that hadn’t been heavily targeted by other hackers. To increase my chances, I chose a self-hosted program where *.domain.com was in scope. The platform was a Web3 wallet site, and the only way to log in was through a wallet connection.

After initial testing yielded nothing significant, I decided to switch gears and use a Google dork:

This helped me uncover some subdomains, and one in particular caught my attention: Portal.

I immediately opened the subdomain and found a registration/login form. Curious, I registered a new account and noticed something strange: I never received a confirmation email. Regardless, I attempted to log in directly but was met with an error:

“No account exists.”

This was odd.