Udemy: Misconfigured SPF Record Flag

Hello Team , Description : this report is about misconfigured spf record flag , which can be use to abuse the organization by posing the identity , which allowing to fake mailing on behalf of respected organization . About the Issue : as i seen the SPF and TXT record for the Udemy.com which is :...

HackerOne: Missing spf flags for hackerone.com

I just checked for SPF records for the hackerone.com domain, and there are none, effectively allowing for spamspoof to originate from that domain. you can validate by testing yourself here: http://www.kitterman.com/spf/validate.html i want to show you an attack scenario An attacker would send a...

HackerOne: SPF whitelist of mandrill leads to email forgery

I just sent a forged email to [email protected] that appears to originate from [email protected]. I was able to do this because of the following SPF record: dig txt hackerone.com hackerone.com. 299 IN TXT "v=spf1 include:spf.google.com include:sendgrid.net include:mail.zendesk.com...

Coin.Space: SMTP protection not used

Hi I'm checking your website found spf record there. You should apply strict SMPT policy to stop spoofed email sending from your domain. An attacker would send a Fake email from [email protected] saying that Please change your password, The victim is aware of phishing attacks, But when he sees...

Shopify: Missing spf flags for myshopify.com

Hello guys I just checked for SPF records for the myshopify.com domain, and there are none, effectively allowing for spam to originate from that domain. you can validate by testing yourself here: http://www.kitterman.com/spf/validate.html The SPF records are correctly set for shopify.com so i gue...

Informatica: Missing SPF for informatica.com

Steps to reproduce: Go Here http://www.kitterman.com/spf/validate.html? Then Put informatica.com Then Click Get SPF Records if any then you will got nothing or no records. POC: http://s28.postimg.org/ofksihxyl/spf.png...

ThisData: Missing SPF header on revert.io

Hi, I noticed that there is no TXT record containing a SPF header: PoC dig TXT revert.io +short "google-site-verification=ix6OUwvbN9AJLTcdg3ulWcMibIWGgUyzWEXrWeRYE4" The SPF Header can be used to prevent phishers from impersonating you/your company in the emails' FROM header. Fix You can fix that...

Block.io: SMPT Protection not used, I can hijack your email server.

Description Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy combining SPF, DKIM, and DMARC but I don't see taht from block.io , You should apply strict SMPT policy to stop spoofed email sending from your domain. POC is attached. Exploit...

CVE-2012-5695

Multiple cross-site request forgery CSRF vulnerabilities in Bulb Security Smartphone Pentest Framework SPF 0.1.2 through 0.1.4 allow remote attackers to hijack the authentication of administrators for requests that conduct 1 shell metacharacter or 2 SQL injection attacks or 3 send an SMS message...

Server side request forgery (ssrf)

Bulb Security Smartphone Pentest Framework SPF before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote attackers to obtain the plaintext database password via a direct request...

CVE-2012-5695

CVE-2012-5695 describes CSRF vulnerabilities in Bulb Security SPF (Smartphone Pentest Framework) affecting versions 0.1.2–0.1.4. The issues allow an attacker to hijack administrator authentication to trigger requests that perform (1) shell metacharacter actions, (2) SQL injection, or (3) sending ...

CVE-2012-5696

This entry corresponds to CVE-2012-5696 in the Smartphone Pentest Framework (SPF). Documentation confirms SPF before 0.1.3 vulnerable to improper access control via the /frameworkgui/config path, allowing remote attackers to obtain the plaintext database password. The connected advisory details m...

CVE-2012-5694

CVE-2012-5694 concerns multiple SQL injection flaws in the Smartphone Pentest Framework (SPF) web GUI, specifically in the frameworkgui/ directory. The linked HTB23123 advisory enumerates affected scripts and parameters (attach2Agents.pl, attachMobileModem.pl, escalatePrivileges.pl, getContacts.p...

CVE-2012-5696

Bulb Security Smartphone Pentest Framework SPF before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote attackers to obtain the plaintext database password via a direct request...

CVE-2012-5697

CVE-2012-5697 relates to the Smartphone Pentest Framework (SPF) web GUI in frameworkgui/, where the btinstall script sets world-writable permissions (777) on all files. This permits a local attacker to read sensitive files and potentially inject arbitrary Perl code via direct access to the files,...

Greenhouse.io: SMTP protection not used (please read carefully )

Details: Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy combining SPF, DKIM, and DMARC but I don't see taht from mailgreenhouse.ioru , You should apply strict SMPT policy to stop spoofed email sending from your domain. POC is attached...

Domain Analyzer Security Tool - Finds all the security information for a given domain name

Domain analyzer is a security analysis tool which automatically discovers and reports information about the given domain. Its main purpose is to analyze domains in an unattended way. Features It creates a directory with all the information, including nmap output files. It uses colors to remark...

LibSPF2 < 1.2.8 DNS TXT Record Parsing Bug Heap Overflow PoC

No description provided by source. Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS, dating at least back to...

Factlink: Missing SPF for factlink.com and Staging.factlink.com

Hello, SPF is missing for both of these sites..Factlink.com and Staging.factlink.com...

Localize: missing sender policy framework (SPF)

A Valid TXT Record was not found in localize.im This can spoof your email address. Proof of Concept: http://mxtoolbox.com/SuperTool.aspx?action=spf:localize.im&run=toolpage related article: Missing SPF for hackerone.com...