HexBrain

HackerOne · Report #120

Missing SPF for hackerone.com

Validstatus
48upvotes
9 Jan 2014disclosed

How it was found

There is no TXT record in DNS zone that defines Sender Policy Framework entry for domain hackerone.com. This makes it easy to spoof your e-mail address.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original