Email spoofing: only for primary email

Signed-off-by: Hadi <[email protected]>
2026-10-05 10:58:25 +02:00 · 2025-09-01 14:13:16 +02:00
parent c67901c9ef
commit 76e8eee4dc
1 changed files with 3 additions and 1 deletions
@@ -166,7 +166,9 @@ Here’s the process:
 1. Create a new repository.
 2. Make a commit using the **target's email** as the author.
 3. Push the commit to GitHub.
-4. Observe which GitHub account gets associated with that commit.
+4. Observe which GitHub account the commit is linked to. This method **always
+   works**, but it only reveals the account if the email is set as the user’s
+   **primary email**.

 All of these steps are handled **automatically by the tool**, so you just need
 to provide the target email.