Email-Vulnerability-Checker

Email Vulnerability Checker v2.1 Verify whether the domain is vulnerable to spoofing by Email-vulnerablity-checker Features of Version 2.1 Added Support to save output on a file using -o flag Added more checks that will accurately tell you the Vulnerability Status. Updated the code completely wit...

Spoofy

Spoofy WHAT Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records. You may be asking, "Why do we need another tool that can check if a domain can be spoofed?" Well, Spoofy is different and here is why: 1. Custom, manually tested spoof logic No guessing...

parsedmarc

parsedmarc parsedmarc is a Python module and CLI utility for parsing DMARC reports. When used with Elasticsearch and Kibana or Splunk, or with OpenSearch and Grafana, it works as a self-hosted open-source alternative to commercial DMARC report processing services such as Agari Brand Protection,...

spfmap

Spfmap A mass domain scanner to check for SPF and DMARC records...

HOCig1_2

HOCig12 HOC IG- Automatic HOC Information Gathering Tool You do not add to Library, it automatically detects and Run Here you go.. HOCig is our first ever tool on GitHub. Here you will find 1. Header Information 2. SSL Certificate Information 3. Whois Lookup 4. Sub-domain Website 5. Robots.txt 6...

CVE-2024-50964

MX Server misconfiguration CVE-2024-50964 Description A critical vulnerability has been identified in Ferozo Webmail v1.1 , where the MX Mail Exchange server of DonWeb completely disregards configured DMARC Domain-based Message Authentication, Reporting, and Conformance policies. Although domains...

SpoofThatMail

SpoofThatMail Bash script to check if a domain or list of domains can be spoofed based in DMARC records File with domains One per line: sh SpoofThatMail.sh -f domains.txt One single domain: sh SpoofThatMail.sh -d domain...

SpamChannel

SpamChannel Live worker hosted at https://spamchannel.haxxx.workers.dev UPDATE Aug 13 2023: Two days after my DEFCON 31 talk, MailChannels silently decided to require aDomain Lockdown Record in order to send emails from Cloudflare Workers meaning this code doesn't work anymore. However, because...

SimpleEmailSpoofer

SimpleEmailSpoofer A few Python programs designed to help penetration testers with email spoofing. This Project is Retired Due to improvements in email protections and anti-spam techniques, it is no longer effective to attempt to spoof emails simply because they do not have a proper DMARC record ...

CVE-2026-114478

Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write, naming in its From an address at a domain the server hosts, delivered to other receivers as passing that domain...

CVE-2026-114474

Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write in the name of a domain the server hosts sent on by the server with an envelope sender at tha...

CVE-2026-114478 Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer

Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write, naming in its From an address at a domain the server hosts, delivered to other receivers as passing that domain...

EUVD-2026-107321

Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write, naming in its From an address at a domain the server hosts, delivered to other receivers as passing that domain...

CVE-2026-114478 Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer

Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write, naming in its From an address at a domain the server hosts, delivered to other receivers as passing that domain...

CVE-2026-114478

Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are vulnerable to an unintended proxy or intermediary flaw (CWE-441 ). Due to insufficient preservation of the original sender during forwarding, an unauthenticated remote attacker can cause the server to deliver mail that appears to pass...

CVE-2026-114474

Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are vulnerable to a Use of Less Trusted Source (CWE-348) issue during external-account downloads. When the server downloads messages from external POP3 or IMAP accounts, it fails to generate a proper SMTP envelope, instead using the addre...

CVE-2026-114474 Use of Less Trusted Source in hMailServer

Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write in the name of a domain the server hosts sent on by the server with an envelope sender at tha...

EUVD-2026-107317

Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write in the name of a domain the server hosts sent on by the server with an envelope sender at tha...

CVE-2026-114474 Use of Less Trusted Source in hMailServer

Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write in the name of a domain the server hosts sent on by the server with an envelope sender at tha...

PT-2026-120652

Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write in the name of a domain the server hosts sent on by the server with an envelope sender at tha...