Email payload generator · CLI
EAMG
2026-07-25
Offline payload generator for authorized testing of email-address handling bugs — equivalence quirks, validation bypass, header/parser discrepancies, and related probes.
- Python
EAMG — Email Address Manipulation Generator
Public CLI for authorized penetration testing of email-address handling bugs.
Given a base address like user@example.com, EAMG generates mutated strings (plus/dot variants, encodings, homographs, injection-oriented probes, legacy/parser forms, and more) for Burp Intruder or manual testing.
- Standard library only — Python 3.6+, no
pip install - Modes:
--simple,--json,--category,--filter,--full,--stats - Designed for staged work: Probe → Observe → Encode → Exploit (not blind full dumps)
Legal / ethics: Use only on systems you own or have written permission to test.
git clone https://github.com/MHaghighian/EAMG.git
cd EAMG
python3 EAMG.py user@example.com --simple > payloads.txt
- Repository: github.com/MHaghighian/EAMG
- Companion research: Email Address Manipulation playbook