[svkad]

Can somebody please tell me how to extract email-id from say a login page? Say if know the username of the profile.
It would be very helpful. Any method would be helpful like sqli, or burp suite or javascript etc.

[wewe98]

I also want to know :D
I also want to know

[HairyQ82]

I would also like to know, this is very interesting

[doomerAndy]

Depending on the web page. If it accepts email as the username and it has an error message that you could use to know if the inputed mail is correct or not, you could easily guess it. You want an error like "username provided doesn't exists" for wrong usernames and something like "username and password don't match" for valid username but wrong password.
If this is the case, given that you know the username, you can just bruteforce the domain name with a list of common email domain names like gmail.com, outlook.com, etc. This can be easily done with burpsuit or whatever proxy you want.
Recall that nowadays very few login pages have different errors messages for this reason, but maybe you are lucky.

[svkad]

Depending on the web page. If it accepts email as the username and it has anerror message that you could use to know if the inputed mail is correct or not, you could easily guess it. You want anerror like "username provided doesn't exists" for wrong usernames and something like "username and password don't match" for valid username but wrong password.
If this is the case, given that you know the username, you can just bruteforce the domain name with a list of common email domain names like gmail.com, outlook.com, etc. This can be easily done with burpsuit or whatever proxy you want.
Recall that nowadays very few login pages have different errors messages for this reason, but maybe you are lucky.

That is actually a pretty awesome trick. Although the username could be different from the email. But you could arrange the words a little and make it work. I'll try that and see the results. Thank you very much for the input.

[doomerAndy]

That is actually a pretty awesome trick. Although the username could be different from the email. But you could arrange the words a little and make it work. I'll try that and see the results. Thank you very much for the input.

You're welcome. Tell us about whatever results you get 👍

[Caretaker]

As Andy said sometimes the error handling allows for guesses to be made, but you can't extract data from the input field if there is no SQLi

[svkad]

Yes, it did give results while I brute-forced different combinations on the login form through burp suite. I had to check the response from the intruder inside the burp suite. I'm talking about the case where the username is quite the same as the email address, just a different combination of the domain name gave the result. Had it been a different email address the extraction would not have output desired results. So SQLi is the way to go for that case. I have to learn SQLi.

[sohack]

I know "Atomic Email Hunter".

[carloghana]

Msg me i can code you a program.

[doomerAndy]

Great man, nice to see you managed to make it work

[svkad]

Great man, nice to see you managed to make it work

Yes I did manage, Thank you very much, but what got me stuck at is when the email is something different from the username.