espoofer

espoofer espoofer is an open-source testing tool to bypass SPF, DKIM, and DMARC authentication in email systems. It helps mail server administrators and penetration testers to check whether the target email server and client are vulnerable to email spoofing attacks or can be abused to send spoofi...

Spoofy

Spoofy WHAT Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records. You may be asking, "Why do we need another tool that can check if a domain can be spoofed?" Well, Spoofy is different and here is why: 1. Authoritative lookups on all lookups with known...

SpoofThatMail

SpoofThatMail Bash script to check if a domain or list of domains can be spoofed based in DMARC records File with domains One per line: root@kitploit: sh SpoofThatMail.sh -f domains.txt One single domain: root@kitploit: sh SpoofThatMail.sh -d domain...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

mailMeta

A forensic tool to make analysis of email headers easy to aid in the quick discovery of the attacker. Table of Contents About mailMeta Installation Usage Linux Windows Demo Contributions Inspiration FAQ License About mailMeta What is mailMeta? mailMeta is a python based forensic tool which reads...

Email-Vulnerability-Checker

Email Vulnerability Checker v2.1 Verify whether the domain is vulnerable to spoofing by Email-vulnerablity-checker Features of Version 2.1 Added Support to save output on a file using -o flag Added more checks that will accurately tell you the Vulnerability Status. Updated the code completely wit...

CVE-2023-51764-POC

기반 https://github.com/duy-31/CVE-2023-51764 및 https://events.ccc.de/congress/2023/hub/en/event/smtpsmugglingspoofinge-mailsworldwide/?trk=publicpostcomment-text 그냥 python 3.x로 포팅한 몇 가지 PoC입니다...

espoofer

espoofer espoofer — это инструмент с открытым исходным кодом для тестирования на проникновение, предназначенный для обхода аутентификации SPF, DKIM и DMARC в почтовых системах. Он помогает администраторам почтовых серверов и специалистам по тестированию на проникновение проверить, уязвим ли целев...

Spoof_AnyMail

SpoofAnyMail Most Powerfull Fake Mail Sender Tool SpoofAnyMail Undetectable Tool Commands to run tool in ur terminal root@kitploit: Note : Tool is Made of Educational Purposes only. Please try not to harm anyone device it's For Fun Purpose Not For Revenge Join Us All https://bit.ly/3PV3S3r About...

CVE-2023-51764

CVE-2023-51764 Postfix SMTP Smuggling - ExpectスクリプトPOC 正当なメールを送信しますが、そのメールの中に他の多くのメール（異なる送信者、受信者、件名など）が含まれています。 最初のメールはSPF/DKIM/DMARCでチェックされますが、内部の他のメールはチェックされません！ 使用法: ./cve-2023-51764.sh mx.fqdn port ./cve-2023-51764.sh mail.mydomain.com 25 注意事項: chmod +x cve-2023-51764.sh expect アプリケーションが必要...

SimpleEmailSpoofer

SimpleEmailSpoofer A few Python programs designed to help penetration testers with email spoofing. This Project is Retired Due to improvements in email protections and anti-spam techniques, it is no longer effective to attempt to spoof emails simply because they do not have a proper DMARC record ...

SpoofcheckSelfTest

SpoofCheck セルフテスト あなたのドメインがメールスプーフィングに対して脆弱かどうかをテストできるWebアプリケーションです。 注記: このアプリケーションはまだ開発中です。 インストール: このアプリケーションはサービスとして使用することを想定しています。ただし、自分でホストしたい場合は、次の手順を実行してください: root@kitploit: git clone https://github.com/bishopfox/spoofcheckselftest.git cd spoofcheckselftest pip install -r requirements.txt...

CVE-2024-50964

MXサーバーの設定ミス CVE-2024-50964 説明 Ferozo Webmail v1.1 において深刻な脆弱性が確認されました。DonWebのMX（Mail Exchange）サーバー が、設定されたDMARC（Domain-based Message Authentication, Reporting, and...

RedTeamScripts

RedTeamScripts 다양한 레드팀 스크립트가 포함된 저장소입니다. kill.exe 레드팀 활동 중 다양한 작업을 수행하면서 수동으로 닫고 싶지 않은 여러 프로세스가 실행 중일 때, kill.exe가 해결책입니다. C:\Windows\에 복사한 후 종료하려는 프로세스 이름과 함께 호출하기만 하면 됩니다. root@kitploit: kill mspaint killing mspaint 16524 killing mspaint 5284 killing mspaint 8568 killing mspaint 32244 killing...

CVE-2021-41349

CVE-2021-41349 익스플로잇! Microsoft Exchange Server 스푸핑 취약점 익스플로잇! 재현 단계! 1. 이와 같은 HTTP 요청을 만들어 Burp에서 캡처하세요 2. 해당 요청의 CSRF PoC를 만들고 HTML 출력을 파일로 저장하세요 3. 저장된 출력을 브라우저에서 열면 & Boom! 또는 제공된 HTML 파일을 사용하고 target.com을 자신의 서버로 변경하기만 하면 됩니다!...

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passkey-themed social engineering to breach cloud environments. The first campaign, per the tech giant, involved sending...

SpamChannel

SpamChannel 다음에서 호스팅되는 라이브 워커: https://spamchannel.haxxx.workers.dev 업데이트 2023년 8월 13일: DEFCON 31 발표 이틀 후, MailChannels는 Cloudflare Workers에서 이메일을 보내기 위해Domain Lockdown Record를 요구하기로 조용히 결정했으며, 이로 인해 이 코드는 더 이상 작동하지 않습니다. 그러나 그들이 "증상"만 해결했을 뿐 근본적인 문제발신자 ID 확인 부족를 해결하지 않았기 때문에, 누구나 여전히 그들의 웹사이트80달...

GHSA-MVXR-6M87-MV2Q Mail: Email address spoofing via malformed RFC 2047 encoded-words

Summary Mail::Utilities.qvaluedecode and Mail::Utilities.bvaluedecode decoded only the first RFC 2047 encoded-word in a string and used an overly greedy pattern to match the charset token. A crafted, malformed encoded-word embedded in an address display name or local part could cause the decoded...

CVE-2026-63435 Mail: Email address spoofing via malformed RFC 2047 encoded-words

Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and Mail::Utilities.bvaluedecode used a single Stringmatch and an overly greedy charset capture to decode only the first RFC 2047 encoded-word and mishandle...

CVE-2026-63435

Mail (Ruby gem for email generation, parsing, and sending) is vulnerable to email address spoofing via malformed RFC 2047 encoded-words prior to version 2.9.1 . The root cause lies in Mail::Utilities.q_value_decode and Mail::Utilities.b_value_decode in lib/mail/utilities.rb, which used a single S...