Email-Vulnerability-Checker

Email Vulnerability Checker v2.1 Verify whether the domain is vulnerable to spoofing by Email-vulnerablity-checker Features of Version 2.1 Added Support to save output on a file using -o flag Added more checks that will accurately tell you the Vulnerability Status. Updated the code completely wit...

mailMeta

A forensic tool to make analysis of email headers easy to aid in the quick discovery of the attacker. Table of Contents About mailMeta Installation Usage Linux Windows Demo Contributions Inspiration FAQ License About mailMeta What is mailMeta? mailMeta is a python based forensic tool which reads...

GHSA-MVXR-6M87-MV2Q Mail: Email address spoofing via malformed RFC 2047 encoded-words

Summary Mail::Utilities.qvaluedecode and Mail::Utilities.bvaluedecode decoded only the first RFC 2047 encoded-word in a string and used an overly greedy pattern to match the charset token. A crafted, malformed encoded-word embedded in an address display name or local part could cause the decoded...

Spoofy

Spoofy WHAT Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records. You may be asking, "Why do we need another tool that can check if a domain can be spoofed?" Well, Spoofy is different and here is why: 1. Authoritative lookups on all lookups with known...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

CVE-2023-51764-POC

на основе https://github.com/duy-31/CVE-2023-51764 и https://events.ccc.de/congress/2023/hub/en/event/smtpsmugglingspoofinge-mailsworldwide/?trk=publicpostcomment-text это просто порт PoC на Python 3.x...

espoofer

espoofer espoofer is an open-source testing tool to bypass SPF, DKIM, and DMARC authentication in email systems. It helps mail server administrators and penetration testers to check whether the target email server and client are vulnerable to email spoofing attacks or can be abused to send spoofi...

espoofer

espoofer espoofer est un outil de test open source pour contourner l'authentification SPF, DKIM et DMARC dans les systèmes de messagerie. Il aide les administrateurs de serveurs de messagerie et les testeurs d'intrusion à vérifier si le serveur de messagerie cible et le client sont vulnérables au...

CVE-2024-50964

Некорректная настройка MX-сервера CVE-2024-50964 Описание Критическая уязвимость была обнаружена в Ferozo Webmail v1.1 , где MX-сервер Mail Exchange DonWeb полностью игнорирует настроенные политики DMARC Domain-based Message Authentication, Reporting, and Conformance. Несмотря на то, что домены...

SpoofThatMail

SpoofThatMail Bash script to check if a domain or list of domains can be spoofed based in DMARC records File with domains One per line: root@kitploit: sh SpoofThatMail.sh -f domains.txt One single domain: root@kitploit: sh SpoofThatMail.sh -d domain...

CVE-2023-51764

CVE-2023-51764 Contrebande SMTP Postfix - Script Expect POC envoyer un email légitime, mais à l'intérieur de l'email se trouvent de nombreux autres emails expéditeurs, destinataires, sujets, etc. différents. L'email initial est vérifié pour SPF/DKIM/DMARC, les autres à l'intérieur ne le sont pas ...

RedTeamScripts

RedTeamScripts Репозиторий с различными скриптами для Red Team. kill.exe Вы выполняете различные действия во время red team, и у вас запущено несколько процессов, которые вы не хотите закрывать вручную. kill.exe — для вас. Скопируйте его в C:\Windows\ и просто вызовите его с именем процесса,...

CVE-2026-63435

Mail (Ruby gem for email generation, parsing, and sending) is vulnerable to email address spoofing via malformed RFC 2047 encoded-words prior to version 2.9.1 . The root cause lies in Mail::Utilities.q_value_decode and Mail::Utilities.b_value_decode in lib/mail/utilities.rb, which used a single S...

CVE-2026-63435 Mail: Email address spoofing via malformed RFC 2047 encoded-words

Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and Mail::Utilities.bvaluedecode used a single Stringmatch and an overly greedy charset capture to decode only the first RFC 2047 encoded-word and mishandle...

CVE-2020-12272

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:59+00:00| seen| https://t.me/hackingAttack/38673 2026-09-02 01:02:21+00:00| seen| https://t.me/hackingAttack/38673...

Spoof_AnyMail

SpoofAnyMail Most Powerfull Fake Mail Sender Tool SpoofAnyMail Undetectable Tool Commands to run tool in ur terminal root@kitploit: Note : Tool is Made of Educational Purposes only. Please try not to harm anyone device it's For Fun Purpose Not For Revenge Join Us All https://bit.ly/3PV3S3r About...

CVE-2026-82853

A flaw was found in Nodemailer. This vulnerability allows a remote attacker to inject arbitrary Simple Mail Transfer Protocol SMTP commands due to improper sanitization of carriage return and line feed characters in the transport name option. This can lead to email spoofing and phishing attacks...

CVE-2026-82661

A flaw was found in Nodemailer, an email sending library. This vulnerability allows a remote attacker with control over specific list comment parameters to inject arbitrary message headers into generated email messages. By failing to sanitize carriage return and line feed CRLF characters, an...

CVE-2026-33604

A flaw was found in Dovecot. A remote attacker can exploit this by crafting a message with a specific line ending. If Dovecot relays this message, it can bypass security protections, allowing the attacker to inject spoofed email into a vulnerable downstream mail server. This vulnerability is...

CVE-2021-41349

CVE-2021-41349 Exploit! Microsoft Exchange Server Spoofing Vulnerability Exploit! Step To Reproduce! 1. Make A HTTP Request Like This & Capture On Burp 2. Make A CSRF PoC Of That Request & Save The HTML Output Into A File 3. Open The Saved Output In A Browser & Boom Or Use The HTML File Given &...