BadOutlook
aahmad097/badoutlookProof-of-concept C# tool that reads Outlook emails via COM interface, extracts base64-encoded shellcode from trigger subject lines, and executes…
command-and-controlemail-securityexploitation+3
137
aahmad097/badoutlookProof-of-concept C# tool that reads Outlook emails via COM interface, extracts base64-encoded shellcode from trigger subject lines, and executes…
busterb/msmailprobeEnumerate valid users on Office 365 and Exchange via time-based and error-based techniques across multiple exposed services, including OWA,…
davidhuser/mxmapAutomated pipeline that resolves Swiss municipality domains, scrapes websites for email addresses, and classifies email providers via MX, SPF, DKIM,…
mr-un1k0d3r/redteamscriptsCollection of offensive red team scripts including process termination, SPF bypass for phishing, password spraying, and ColdFusion password…
0neb1n/cve-2020-16947Proof-of-concept exploit for CVE-2020-16947, a Microsoft Outlook RCE triggered by malformed HTML content leading to a heap buffer overflow and remote…
mthbernardes/whoamimailbotSelf-hosted email alias masking service using Postfix and Telegram bot to create disposable addresses for signups, with full control over email…
trustedsec/reelPhishing simulation and awareness framework for node-based campaigns, credential capture, SMTP delivery, CAPTCHA, and optional browser credential…
portswigger/splitting-the-email-atomResearch materials and tooling for exploiting email address parser discrepancies to bypass access controls, including fuzzers, Hackvertor tags, CSS…
black-scorp10/email-vulnerability-checkerAutomated SPF and DMARC configuration checker that identifies email spoofing vulnerabilities across single or bulk domains using DNS lookups.
dcarrero/mboxshellmboxShell. Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups (50GB+) without loading them…
rm1984/imaplogintesterA simple Python script that reads a text file with lots of e-mails and passwords, and tries to check if those credentials are valid by trying to…
pixelbubble/pastemonitorScrape Pastebin API to collect daily pastes, setup a wordlist and be alerted by email when you have a match.
bishopfox/spfmapA program to map out SPF and DKIM records for a large number of domains
cyb3rmik3/prompt-injection-email-samplesOpen .eml test set for evaluating how email security controls and AI mailbox assistants handle indirect prompt injection across disclosure,…
inquest/python-inquestlabsA Pythonic interface and command line tool for interacting with the InQuest Labs API.
0neb1n/cve-2020-1493Technical analysis and PoC details for CVE-2020-1493, a zero-click Outlook RCE triggered by malformed MS-TNEF attachments leading to remote code…
onvio/gophishGophish with Malicious Attachment and HTTP redirect support
thoropass-public/area51The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a…