HOCig1_2

HOCig12 HOC IG - 自动HOC（信息收集）工具 你无需手动添加到库中，它会自动检测并运行 开始吧.. HOCig 是我们在 GitHub 上的第一个工具。 功能列表 1. 头部信息 2. SSL证书信息 3. Whois 查询 4. 子域名网站 5. Robots.txt 6. 基于 Shodan 的蜜罐检测器 7. 基于 SYN ACK 扫描的端口扫描器 8. 操作系统指纹识别 9. 爬取目标网站（包括：电子邮件、子域名、文件类型） 10. DNS 扫描器 11. DMARC 扫描器（用于邮件欺骗检测） 安装方法 git clone...

parsedmarc

parsedmarc parsedmarc es un módulo de Python y una utilidad CLI para analizar informes DMARC. Cuando se usa con Elasticsearch y Kibana o Splunk, o con OpenSearch y Grafana, funciona como una alternativa de código abierto autohospedada a los servicios comerciales de procesamiento de informes DMARC...

Email-Vulnerability-Checker

邮件漏洞检测器 v2.1 通过 Email-vulnerablity-checker 验证域名是否存在伪造漏洞 版本 2.1 的新特性 新增通过 -o 标志将输出保存到文件的支持 新增更多检查项，可准确告知漏洞状态 完全更新了代码，结果更准确 优化了工具并美化了部分界面外观 邮件漏洞检测器 该脚本检查邮件域的 SPF 和 DMARC 配置，以确定其漏洞状态。对系统管理员或安全专业人员评估邮件基础设施安全性非常有用。 用法 运行脚本，执行以下命令： ./spfvuln.sh options 选项 -h, --help: 显示帮助信息。 -v: 显示脚本版本。 -t :...

Spoofy

Spoofy WHAT Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records. You may be asking, "Why do we need another tool that can check if a domain can be spoofed?" Well, Spoofy is different and here is why: 1. Custom, manually tested spoof logic No guessing...

SpoofThatMail

SpoofThatMail Bash脚本，用于根据DMARC记录检查单个域名或域名列表是否可以被伪造 包含域名的文件（每行一个）： sh SpoofThatMail.sh -f domains.txt 单个域名： sh SpoofThatMail.sh -d domain...

espoofer

espoofer espoofer 是一个开源测试工具，用于绕过电子邮件系统中的 SPF、DKIM 和 DMARC 认证。它帮助邮件服务器管理员和渗透测试人员检查目标邮件服务器和客户端是否容易受到电子邮件欺骗攻击，或者是否可能被滥用来发送欺骗性电子邮件。 图 1. 我们对 Gmail 的欺骗攻击案例（已修复，演示视频） 为什么构建这个工具？ 电子邮件欺骗对个人和组织都是巨大威胁（雅虎数据泄露、John Podesta 事件）。为了解决这个问题，现代电子邮件服务和网站采用了认证协议——SPF、DKIM 和 DMARC——来防止电子邮件伪造。...

CVE-2024-50964

MX服务器配置错误 CVE-2024-50964 描述 Ferozo Webmail v1.1 中发现一项严重漏洞，其中 DonWeb 的 MX（邮件交换）服务器 完全忽略已配置的 DMARC（基于域的消息认证、报告和一致性）策略。尽管相关域将其 DMARC 策略设置为“拒绝”未经授权或伪造的邮件，DonWeb 的邮件服务器却未能验证这些策略，导致伪造邮件绕过身份验证并直达用户收件箱。此疏忽为攻击者冒充合法域名打开了大门，显著增加了钓鱼和欺骗攻击的风险。 攻击复杂度 低 所需权限 无 用户交互 不需要 受影响组件 邮件服务器 DMARC 处理 ：DonWeb 的 MX 服务器缺乏对...

SpamChannel

SpamChannel Live worker hosted at https://spamchannel.haxxx.workers.dev UPDATE Aug 13 2023: Two days after my DEFCON 31 talk, MailChannels silently decided to require aDomain Lockdown Record in order to send emails from Cloudflare Workers meaning this code doesn't work anymore. However, because...

SimpleEmailSpoofer

SimpleEmailSpoofer 几个旨在帮助渗透测试人员进行电子邮件欺骗的Python程序。 本项目已退役 由于电子邮件保护和反垃圾邮件技术的改进，简单地因为目标没有正确的DMARC记录或从任意邮件服务器发送来进行电子邮件欺骗已不再有效。本项目已退役，将不再维护。 设置 邮件服务器 邮件服务器不接受来自普通计算机的连接。为了限制垃圾邮件数量，大多数MTA只接受来自拥有完全限定域名（FQDN）的中继的连接。因此，使用本项目最简单的方式是从一台Linux虚拟专用服务器进行。有一些免费或廉价的选择，例如Digital Ocean、Linode和Amazon EC2。...

spfmap

Spfmap Un escáner masivo de dominios para comprobar los registros SPF y DMARC...

Linux Distros Unpatched Vulnerability : CVE-2026-101014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcutilcleanup in the library...

Linux Distros Unpatched Vulnerability : CVE-2026-101279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file...

DEBIAN-CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

UBUNTU-CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

EUVD-2026-88594

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101279

A security vulnerability exists in Trusted Domain Project OpenDMARC up to version 1.4.2 . The flaw is located in the DMARC Parser component, specifically within an unknown function in the file libopendmarc/opendmarc_policy.c. The root cause is an integer overflow triggered by the manipulation of ...

CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101279 Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101279 Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...