387 matches found
CVE-2025-68624
N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. When connecting to the SMTP TCP port and performing SMTP AUTH with valid credentials, the server...
assets-from-spf
assets-from-spf A Python script to parse netblocks & domain names from SPFSender Policy Framework DNS record For every parsed asset, the script will also find and print Autonomous System NumberASN details For now, the output is printed in JSON format only Demo Screenshots 3rd party package...
PT-2026-90993
N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. When connecting to the SMTP TCP port and performing SMTP AUTH with valid credentials, the server...
EUVD-2025-210903
N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. When connecting to the SMTP TCP port and performing SMTP AUTH with valid credentials, the server...
Spoofy
Spoofy WHAT Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records. You may be asking, "Why do we need another tool that can check if a domain can be spoofed?" Well, Spoofy is different and here is why: 1. Authoritative lookups on all lookups with known...
SPF
SPF SpeedPhish Framework is a python tool designed to allow for quick recon and deployment of simple social engineering phishing exercises. Requirements: dnspython twisted PhantomJS Installation root@kitploit: apt-get update apt-get upgrade -y apt-get install git build-essential python-dev...
domain_analyzer
Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...
subjack
subjack DNS 子域名接管扫描器 Subjack 是一个用 Go 编写的 DNS 接管扫描器，旨在并发扫描域名列表，并识别出可被劫持的域名。借助 Go 的速度和效率，该工具在大规模测试中表现尤为突出。请务必手动复核结果以排除误报。 Subjack 可检测： CNAME 接管 — 指向未认领第三方服务的悬挂 CNAME 记录 NS 委派接管 — 已过期的域名服务器域名和悬挂的云 DNS 区域（Route 53、Google Cloud DNS、Azure DNS、DigitalOcean、Vultr、Linode） 过时的 A 记录 —...
Email-Vulnerability-Checker
Email Vulnerability Checker v2.1 Verify whether the domain is vulnerable to spoofing by Email-vulnerablity-checker Features of Version 2.1 Added Support to save output on a file using -o flag Added more checks that will accurately tell you the Vulnerability Status. Updated the code completely wit...
espoofer
espoofer espoofer 是一个开源测试工具，用于绕过电子邮件系统中的 SPF、DKIM 和 DMARC 认证。它帮助邮件服务器管理员和渗透测试人员检查目标邮件服务器和客户端是否容易受到电子邮件欺骗攻击，或者是否可能被滥用来发送欺骗性电子邮件。 图 1. 我们对 Gmail 的欺骗攻击案例（已修复，演示视频） 为什么构建这个工具？ 电子邮件欺骗对个人和组织都是巨大威胁（雅虎数据泄露、John Podesta 事件）。为了解决这个问题，现代电子邮件服务和网站采用了认证协议——SPF、DKIM 和 DMARC——来防止电子邮件伪造。...
spfmap
Spfmap A mass domain scanner to check for SPF and DMARC records...
RedTeamScripts
RedTeamScripts Repository with various Red Team scripts. kill.exe Performing all kind of activities during a red team and you have several process running that you don't want to close manually. kill.exe is for you. copy it in C:\Windows\ and simply call it with the process name you want to kill...
Medium: sendmail
Issue Overview: sendmail through at least 8.14.7 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because sendmail...
CVE-2016-10793
cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect ! in Mail::SPF scripts SEC-152...
EUVD-2015-4207
Malware in sbrugna...
EUVD-2019-11327
Malware in sbrugna...
EUVD-2006-4604
Malware in sbrugna...
EUVD-2016-1787
Malware in sbrugna...