I hacked a way to use URL shortener to extract users' emails from GitHub/Docker

4 pointslexokoh2 comments

I hacked together a way to use a URL shortener to extract users' emails when fetching GitHub or Docker content.

This was out of curiosity. Check out how it works and see how to protect yourself.

https://github.com/kagehq/email-extractor

I don't understand. Doesn't the git repo has the email in plain text?

Yes, but that's when they fork your repo. But if they are basically are cloning or using it, you mostly don't know who is.