Firas Fatnassi
1 min readJun 28, 2020

--

The API endpoint looks like this: https://target.com/registration/check-email?email=.

As you can see there is an email parameter, So when you put an email address there and send the request the app checks if the email is available then it returns true and if the email is not available it returns false.

--

--

Firas Fatnassi
Firas Fatnassi

Written by Firas Fatnassi

Security @ MoralisWeb3, Bug Bounty Hunter, MSRC MVR 2022.

No responses yet