megadose/holehe

Does any check makes email be sent to target mailbox?

lorien opened this issue · 5 comments

lorien commented

Are all these checks safe? I mean, in some cases you can reveal some data with password recovery feature but email will be send to target mailbox.

megadose commented

No on sites that use the password function, the user is not at all alert! I have tested on all the sites that use this function, if you find one of the sites in the list that alerts the user I would remove it right away, but normally it's ok.

  • 👍10