Week 35 - User Accounts

Have you ever been on an AppSec engagement that involved multiple levels of access (admin/merchant/user)? You could use a different email account for each level, OR you could just use one! This is possible through Plus Addressing. All the below inboxes will send to the same email: [email protected] [email protected] [email protected] [email protected] Any email sent to [email protected] is still sent to your account. I find this especially useful for: -Testing Invite Features -Account Sign Ups -Account Blacklist Bypasses