#1Email filtering, DKIM/DMARC/SPF, anti-spam, phishing detection, and email gateway tools.
Kitploit recommended
bishopfox/spoofcheckselftestWeb application that lets you test if your domain is vulnerable to email spoofing
rub-nds/johnny-you-are-firedArtifacts for the USENIX publication.
noxxi/mime-is-brokenTest cases for broken MIME and tools to generate and process these
h3x0v3rl0rd/smtp_userenumPython script for enumerating SMTP users by leveraging VRFY and EXPN commands to identify valid email accounts on a target mail server.
bishopfox/exchange-scannerIdentify public-facing Microsoft Exchange servers and determine their software versions
jenderal92/shadow-vaultShadow Vault – Add shadow users with SHA-512 hash, auto aging match, multiple write fallbacks.
amavis/amavisamavis is a high-performance email content filter framework written in Perl.
0xblackash/cve-2026-28289CVE-2026-28289
saykino/cve-2026-31283Documentation of CVE-2026-31283: an email bombing vulnerability in Totara LMS's forgot password API due to missing rate limiting, allowing…
mseymend/cve-2024-21413CVE-2024-21413 Açığını Kullanarak Giriş Bilgilerini Alma
solmin111/opensmtpd-cve-2020-7247-Docker-based lab demonstrating CVE-2020-7247 remote code execution in OpenSMTPD 6.6.1p1 with a Python PoC for educational security testing.
pedro-lucas-melo/estudo-de-caso-cve-2024-21413Um estudo de caso do CVE-2024-21413. Usado como parâmetro a sala do TryHackMe Moniker Link (CVE-2024-21413). Feito edições com claude code no exploit.
an0nud4y/evilginx-phishing-infra-setupEvilginx Phishing Infrastructure Setup Guide - Securing Evilginx and Gophish Infrastructure, Removing IOCs, Phishing TTPs
hackerxphantom/spoof_anymailMost Powerful Send Fake Mail Using Any Mail I'd undetectable
victoni/roundcube-cve-2024-42008-and-cve-2024-42010-pocPOC for Roundcube vulnerabilities CVE-2024-42008 and CVE-2024-42010
