Looking to expose hidden emails?

[deedee-blackhat]

Hi there. I'm selling through a 3rd party site. People are purchasing my service, but their emails are not being shared. I have a page with my customer list, but the emails are shown as:
jan***@gmail.com

I am not a developer, but when inspect the site, this is what is displayed:

Is there a way to modify this so that the email isn't blocked with stars? How can I get the email address?

Thank you for your help!

 

[alurosu]

I'm selling through a 3rd party site. People are purchasing my service, but their emails are not being shared.

If that platform doesn't allow you to change the backend, it's almost impossible to try.

 

[Ashk881]

Is there a way to modify this so that the email isn't blocked with stars? How can I get the email address?

No. The uncensored email is not sent to the clientside, their backend only sends a censored text. Had it hidden on the clientside, you could just inspect element and clear it. But that's not the case.

 

[ensus]

Yeah nah thats backend, although i guess one more thing you can try, seeing as ng indicates a front end framework where some work could be handled client-side JavaScript, is:
Opening dev tools > inspect > network, clear everything, make sure its recording, refresh the page, and see if any server response comes back in JSON format, but i doubt it.

(the settings should all kind of look like this, but the response wont look this random)

Note: This is all on the off-chance some dev in the backend isnt doing his job with the API, and where the front-end is censoring and binding the data to template

 

[deedee-blackhat]

Yeah nah thats backend, although i guess one more thing you can try, seeing as ng indicates a front end framework where some work could be handled client-side JavaScript, is:
Opening dev tools > inspect > network, clear everything, make sure its recording, refresh the page, and see if any server response comes back in JSON format, but i doubt it.

(the settings should all kind of look like this, but the response wont look this random)
View attachment 196569

Note: This is all on the off-chance some dev in the backend isnt doing his job with the API, and where the front-end is censoring and binding the data to template

I'm not sure if I did this correctly? I know how to open dev tools > inspect > network > how do I "clear everything"?
I ran the recording, refreshed, but how do I know if any server response comes back in JSON format? You implied that this would be a long shot, but I'm seriously willing to try anything. Thank you for your help.

 

[ensus]

I'm not sure if I did this correctly? I know how to open dev tools > inspect > network > how do I "clear everything"?
I ran the recording, refreshed, but how do I know if any server response comes back in JSON format? You implied that this would be a long shot, but I'm seriously willing to try anything. Thank you for your help.

Like other users mentioned tbh, if this content is server-side rendered, or the API is supplying censored data, then you're out of luck.

But if the API is returning these emails in JSON format, clientside censoring, I think fuck it worth a try...

So yeah when you open that section, clearing everything will happen when you refresh the page, so dont worry about that,
The million dollar question you asked, where is the data? JSON will just be the format, you now have a list of files your browser has requested/received, you need to click them and "preview" them.

 

[sonalisinha]

Definitely the 3rd party site restricted to check them. No way to check them if that guy don't withdraw restrictions

 

[Lawrus]

Kesinlikle 3. taraf site onları kontrol etmekle sınırlıdır. O adam kısıtlamaları kaldırmazsa onları kontrol etmenin yolu yok

yes