Web outlook email bypass for more convincing phishing emails

[forlan12]

In Outlook desktop and web app , "display name" of email's "From" header can manipulate the from email which is displayed to the user, that can result in more convincing phish emails

Link to the Repo

 

[Zodiac]

Was this verified ? Does it worked for you ?

 

[offy_xD]

It works, but I think if you have outlook 16 version

 

[molotov477]

At time I'm just amazed at how its the most simplest of things that gets the results done. Who would have thought, adding spaces in the email address bar would help you in phishing

 

[pollos]

any exemple of header manipulation or we can use in boundary?