spamassassin
apache/spamassassinOpen-source email filtering framework that detects spam and phishing using content analysis, header checks, Bayesian scoring, and DNS blocklists.
defensive-toolsemail-securitymachine-learning+1
344
apache/spamassassinOpen-source email filtering framework that detects spam and phishing using content analysis, header checks, Bayesian scoring, and DNS blocklists.
arno0x/ntlmrelaytoewsntlm relay attack to Exchange Web Services
iamthefrogy/frogy2.0Orbis is an full spectrum automated external attack surface intelligent toolkit.
mdsecactivebreach/o365-attack-toolkitA toolkit to attack Office365
rspamd/rspamdSpam filtering and email processing framework with regex rules, statistical analysis, custom Lua plugins, and external blocklists for MTA integration.
saykino/cve-2026-31283Documentation of CVE-2026-31283: an email bombing vulnerability in Totara LMS's forgot password API due to missing rate limiting, allowing…
jump-wang-111/amzwordAn automated attack chain based on CVE-2022-30190, 163 email backdoor, and image steganography.
emalderson/thephishThePhish: an automated phishing email analysis tool
randomaccess3/awesome-becRepository of attack and defensive information for Business Email Compromise investigations
quickbreach/exchangerelayxAn NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.
inquest/python-inquestlabsA Pythonic interface and command line tool for interacting with the InQuest Labs API.
sublime-security/sublime-rulesSublime rules for email attack detection, prevention, and threat hunting.
viniciusfariasdev/cve-2024-21413-outlook-monikerlink-labEducational lab and PoC demonstrating CVE-2024-21413 Outlook Moniker Link attack to leak netNTLMv2 hashes via crafted HTML email.
dionissh/cve-2024-21413Proof-of-concept exploit for Microsoft Outlook RCE (CVE-2024-21413) with SMTP-based phishing email delivery, malicious RTF attachment generation, and…
brets0150/stickyeximExim Honey Pot for CVE-2019-10149 exploit attempts.
fdzdev/cve-2024-50964Documentation of CVE-2024-50964: critical DMARC policy bypass in DonWeb MX server allowing email spoofing, with low attack complexity and no required…
praneethnaidu1910-cmd/cve-2023-23397-purple-teamPurple team project exploiting CVE-2023-23397 Outlook NTLM leak with phishing delivery, plus Sigma/Wazuh detections mapped to MITRE ATT&CK for the…
bhatbhupendra/moniker-link--cve-2024-21413-Educational guide on CVE-2024-21413, the Outlook zero-click Moniker Link vulnerability, covering attack flow, NTLM credential capture, detection with…