Tools

bishopfox/spoofcheckselftest

Web application that lets you test if your domain is vulnerable to email spoofing

bishopfox/spfmap

A program to map out SPF and DKIM records for a large number of domains

pixelbubble/pastemonitor

Scrape Pastebin API to collect daily pastes, setup a wordlist and be alerted by email when you have a match.

sublime-security/ics-phishing-toolkit

Open source tooling to stop ICS phishing (malicious calendar invites)

d0rb/cve-2024-21378

This repository contains an exploit for targeting Microsoft Outlook through Exchange Online, leveraging a vulnerability to execute arbitrary code via…

noxxi/mime-is-broken

Test cases for broken MIME and tools to generate and process these

michael-david-fry/cve-2024-39929

POC to test CVE-2024-39929 against EXIM mail servers

mcracker2002/mailphish

Creates professional phishing emails with 20+ templates for credential harvesting, including HTML generation and direct email delivery to targets.

sqrtzeroknowledge/cve-2023-23397_exploit_0day

Exploit for the CVE-2023-23397

bronzebee/cve-2023-23397

Python script for sending e-mails with CVE-2023-23397 payload using SMTP

ashwesker/ashwesker-cve-2025-68645

POC BLH Magelang CSIRT 2026 by babyrootkid

rxerium/cve-2024-39929

Detection method for Exim vulnerability CVE-2024-39929

theunknownsoul/cve-2023-23397-pow

Proof of Work of CVE-2023-23397 for vulnerable Microsoft Outlook client application.

d4op/cve-2023-51764-poc

just idea, no cp pls

mailcow/mailcow-dockerized

Dockerized mail server suite with Postfix, Dovecot, Rspamd, and ClamAV. Provides secure email hosting with integrated spam filtering, antivirus, and…