rspamd
rspamd/rspamdSpam filtering and email processing framework with regex rules, statistical analysis, custom Lua plugins, and external blocklists for MTA integration.
defensive-toolsemail-securityphishing+1
2.5k
rspamd/rspamdSpam filtering and email processing framework with regex rules, statistical analysis, custom Lua plugins, and external blocklists for MTA integration.
apache/spamassassinOpen-source email filtering framework that detects spam and phishing using content analysis, header checks, Bayesian scoring, and DNS blocklists.
sublime-security/sublime-rulesSublime rules for email attack detection, prevention, and threat hunting.
praneethnaidu1910-cmd/cve-2023-23397-purple-teamPurple team project exploiting CVE-2023-23397 Outlook NTLM leak with phishing delivery, plus Sigma/Wazuh detections mapped to MITRE ATT&CK for the…
iamthefrogy/frogy2.0Orbis is an full spectrum automated external attack surface intelligent toolkit.
randomaccess3/awesome-becRepository of attack and defensive information for Business Email Compromise investigations
bhatbhupendra/moniker-link--cve-2024-21413-Educational guide on CVE-2024-21413, the Outlook zero-click Moniker Link vulnerability, covering attack flow, NTLM credential capture, detection with…
fathanahhidayati/https-github.com-xaitax-cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerabilityProof-of-concept exploit for CVE-2024-21413, a Microsoft Outlook remote code execution vulnerability. Demonstrates NTLM credential leakage and RCE…
saykino/cve-2026-31283Documentation of CVE-2026-31283: an email bombing vulnerability in Totara LMS's forgot password API due to missing rate limiting, allowing…
dionissh/cve-2024-21413Proof-of-concept exploit for Microsoft Outlook RCE (CVE-2024-21413) with SMTP-based phishing email delivery, malicious RTF attachment generation, and…
viniciusfariasdev/cve-2024-21413-outlook-monikerlink-labEducational lab and PoC demonstrating CVE-2024-21413 Outlook Moniker Link attack to leak netNTLMv2 hashes via crafted HTML email.
inquest/python-inquestlabsA Pythonic interface and command line tool for interacting with the InQuest Labs API.
fdzdev/cve-2024-50964Documentation of CVE-2024-50964: critical DMARC policy bypass in DonWeb MX server allowing email spoofing, with low attack complexity and no required…
emalderson/thephishThePhish: an automated phishing email analysis tool
jump-wang-111/amzwordAn automated attack chain based on CVE-2022-30190, 163 email backdoor, and image steganography.
optiv/microsoft365_devicephishA proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow
mdsecactivebreach/o365-attack-toolkitA toolkit to attack Office365
brets0150/stickyeximExim Honey Pot for CVE-2019-10149 exploit attempts.