BadOutlook
aahmad097/badoutlookProof-of-concept C# tool that reads Outlook emails via COM interface, extracts base64-encoded shellcode from trigger subject lines, and executes…
command-and-controlemail-securityexploitation+3
137
aahmad097/badoutlookProof-of-concept C# tool that reads Outlook emails via COM interface, extracts base64-encoded shellcode from trigger subject lines, and executes…
cisagov/scubagearAutomation to assess the state of your M365 tenant against CISA's baselines
mail-in-a-box/mailinaboxMail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server…
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
bishopfox/spoofcheckselftestWeb application that lets you test if your domain is vulnerable to email spoofing
liamromanis101/dead.letter-cve-2026-45185Shell-based vulnerability scanner for CVE-2026-45185 (Dead.Letter) in Exim MTA. Detects use-after-free in GnuTLS builds, checks version, TLS library,…
0x00-0x00/cve-2018-15131Zimbra Collaboration Suite Username Enumeration
theunknownsoul/cve-2023-23397-powProof of Work of CVE-2023-23397 for vulnerable Microsoft Outlook client application.
ashwesker/ashwesker-cve-2025-68645POC BLH Magelang CSIRT 2026 by babyrootkid
lionels-cyber/cve-2024-45519-zimbra-real-fixZimbra CVE-2024-45519 real fix - Official patch is incomplete
r3dcl1ff/cve-2022-41040mitigation script for MS Exchange server vuln
shoucheng3/asf__james-project_cve-2022-22931_3-6-0Modular Java mail server supporting IMAP, SMTP, POP3, and JMAP with Docker deployment, distributed architecture, and CLI management for secure…
noxxi/p5-ssl-toolsPerl scripts for SSL/TLS analysis: check protocol and cipher support, verify certificates, test OCSP, and detect Heartbleed across SMTP, HTTPS, and…
galvnyz/m365-assess290+ Automated checks across 14 compliance frameworks, interactive HTML report, no data leaves your machine.
daryllundy/cve-2025-32711PowerShell-based detection and remediation toolkit for CVE-2025-32711 (EchoLeak), a critical zero-click AI command injection vulnerability in…
victoni/roundcube-cve-2024-42008-and-cve-2024-42010-pocPOC for Roundcube vulnerabilities CVE-2024-42008 and CVE-2024-42010
biutrap/cve-2026-73570Proof-of-concept exploit for CVE-2026-73570, demonstrating SMTP command injection via crafted RCPT TO header to trigger service status changes.
im007/cve-2023-23397PowerShell script to detect and remediate CVE-2023-23397 privilege escalation vulnerability in Microsoft Outlook and Exchange environments.