Email Vulnerability Checker v2.1

Verify whether the domain is vulnerable to spoofing by Email-vulnerablity-checker

Features of Version 2.1

• Added Support to save output on a file using -o flag
• Added more checks that will accurately tell you the Vulnerability Status.
• Updated the code completely with proper and accurate results.
• Enhanced the tool and decorated some look and feel on the tool.

Email Vulnerability Checker

This script checks the SPF and DMARC configurations of email domains to determine their vulnerability status. It's useful for system administrators or security professionals to assess email infrastructure security.

Usage

To run the script, execute it with the following command:

./spfvuln.sh [options]

Options

• -h, --help: Display the help message.
• -v: Display the version of the script.
• -t : Specify a file containing a list of domains to check.
• -d : Specify a single domain to check.
• -o <output.txt>: Specify an output file to save the results.

Requirements

• Bash-compatible shell: Ensure your system supports Bash scripting.
• nslookup command: Make sure the nslookup command is installed and available in your system's PATH.

Installation Steps

1. Clone the Repository:

   root@kitploit:~

   git clone https://github.com/BLACK-SCORP10/Email-Vulnerability-Checker.git
   

2. Navigate to the Directory:

   root@kitploit:~

   cd Email-Vulnerability-Checker
   

3. Make the Script Executable:

   root@kitploit:~

   chmod +x spfvuln.sh
   

4. Install Requirements:

   For Ubuntu or Debian:

   root@kitploit:~

   sudo apt update
   sudo apt install dnsutils
   

   For CentOS or RHEL:

   root@kitploit:~

   sudo yum install bind-utils   # CentOS, RHEL
   

   or

   root@kitploit:~

   sudo dnf install bind-utils   # Fedora
   

5. Verify Installation:

   root@kitploit:~

   nslookup example.com
   

   or

   root@kitploit:~

   nslookup -version
   

Usage

Example Usage

Checking a single domain:

./spfvuln.sh -d example.com

Checking multiple domains from a file:

./spfvuln.sh -t domains.txt

Saving results to an output file:

./spfvuln.sh -d example.com -o output.txt

Updating the tool

To update your tool after a new version has been released, follow these steps:

1. Navigate to the Tool Directory:

   root@kitploit:~

   cd Email-Vulnerability-Checker
   

2. Pull the Latest Changes from the Remote Repository:

   root@kitploit:~

   git pull origin main
   

Notes

• Replace example.com with the domain you want to check.
• Ensure spfvuln.sh is executable (chmod +x spfvuln.sh) before use.
• Detailed information about the tool's options and functionality can be found by running ./spfvuln.sh -h or ./spfvuln.sh --help.

Preview

Detail Description On Configurations Flag

Other types are Redirect Mechanism and Multiple SPF Flags.

• On Redirect Mechanism, The DMARC redirects to another domain/subdomain for the policies that is used over the domains. Better to check it manually.
• On Multiple SPF Flags, The SPF has more then one defined flags, "A domain must not have multiple SPF records as both will be declined by the recipient server, making the authentication impossible". You can report this.

Author

This Email Vulnerability Checker script was created by BLACK-SCORP10. For queries or feedback, contact the author via Telegram: BLACK-SCORP10.

Version

Current version: 2.1

Disclaimer

This script is provided as-is, Use it at your own risk.

Support

For Queries: Telegram
Contributions, issues, and feature requests are welcome!
Give a ★ if you like this project!

License

This project is licensed under the MIT License - see the LICENSE file for details.