domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

SPF

SPF（SpeedPhish框架）是一个Python工具，旨在快速侦察和部署简单的社会工程钓鱼演练。 要求： dnspython twisted PhantomJS 安装 root@kitploit: apt-get update apt-get upgrade -y apt-get install git build-essential python-dev python-pip phantomjs -y apt install python3-twisted apt install python3-dnspython git clone --recursive...

Spoofy

Spoofy 功能简介 Spoofy 是一个程序，用于根据 SPF 和 DMARC 记录检查一组域名是否可以被伪造。你可能会问：“为什么我们还需要另一个工具来检查域名是否可伪造？” 嗯，Spoofy 与众不同的原因如下： 1. 对所有查询进行权威查找，并带有已知的备用 DNS（Cloudflare DNS） 2. 精确的批量查询 3. 自定义、手动测试的伪造逻辑（不猜测或推测，基于真实世界的测试结果） 4. SPF DNS 查询计数器 5. 可选：通过 API 进行 DKIM 选择器枚举 通过测试 使用方法 Spoofy 需要 Python 3+ 。不支持 Python 2。用法如下：...

Medium: sendmail

Issue Overview: sendmail through at least 8.14.7 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because sendmail...

CVE-2016-10793

cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect ! in Mail::SPF scripts SEC-152...

EUVD-2015-4207

Malware in sbrugna...

EUVD-2019-11327

Malware in sbrugna...

EUVD-2006-4604

Malware in sbrugna...

EUVD-2016-1787

Malware in sbrugna...

EUVD-2024-48177

Malicious code in bioql PyPI...

EUVD-2023-46577

Malicious code in bioql PyPI...

Fake DocuSign email hides tricky phishing attempt

On my daily rounds, I encountered a phishing attempt that used a not completely unusual, yet clever delivery method. What began as a seemingly routine DocuSign notification turned into a multi-layered deception involving Webflow, a shady redirect, and a legitimate Google login page. Webflow is a...

Astra Linux – Vulnerability in libspf2

Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing o...

TencentOS Server 4: libspf2 (TSSA-2025:0149)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0149 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2024-7208

A vulnerability in multi-tenant hosting allows an authenticated sender to spoof the identity of a shared, hosted domain, thus bypass security measures provided by DMARC or SPF or DKIM policies...

CVE-2025-22996

A stored cross-site scripting XSS vulnerability in the spftablecontent component of Linksys E5600 Router Ver. 1.1.0.26 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the desc parameter...

OESA-2024-2586 libspf2 security update

libspf2 is an implementation of the SPF Sender Policy Framework specification as found at: http://www.ietf.org/internet-drafts/draft-mengwong-spf-00.txt SPF allows email systems to check SPF DNS records and make sure that an email is authorized by the administrator of the domain name that it is...

OESA-2024-2584 libspf2 security update

libspf2 is an implementation of the SPF Sender Policy Framework specification as found at: http://www.ietf.org/internet-drafts/draft-mengwong-spf-00.txt SPF allows email systems to check SPF DNS records and make sure that an email is authorized by the administrator of the domain name that it is...

ROS-20240911-05

A vulnerability in the libspf2 library of the Exim mail server is related to an integer overflow resulting from the of SPF macros. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...

PT-2024-41041 · Qtech · Qtech Gigabit Spf Wifi Gateway

Name of the Vulnerable Software and Affected Versions: Qtech Gigabit SPF WiFi Gateway affected versions not specified Description: The issue is related to inadequate access control in the Qtech Gigabit SPF WiFi Gateway's firmware, allowing a remote attacker to execute arbitrary commands on the...