+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Decode asterisks email (/showthread.php?tid=6296011)
Decode asterisks email - AliWtf - Apr 10, 2025
Good day. I was wondering if there was a way to reveal emails which are encoded in asterisks form, like that on a social media account recovery page.
RE: Decode asterisks email - DramaKing - Apr 10, 2025
(Apr 10, 2025 12:31 PM)AliWtf Wrote: Good day. I was wondering if there was a way to reveal emails which are encoded in asterisks form, like that on a social media account recovery page.
Sure, web developers just have an overlay to hide emails and phone numbers. I would guess that the data is fetched from the backend database by PHP and fed through a function to replace parts of the addresses or numbers. This would be done server-side with no injection points or endpoints to manipulate. There are much easier methods to hijack accounts.
RE: Decode asterisks email - Dotexe - Apr 10, 2025
If the system is properly set up the full email is never sent to the browser at all. It’s masked server-side before it even reaches the front end. So even if you inspect the element or check the network requests, you’ll only ever see the asterisks. There’s no way to reveal it unless there’s a flaw in how the data is handled or exposed through an API, which is rare on secure platforms.