Tools

0neb1n/cve-2020-16947

PoC of CVE-2020-16947 (Microsoft Outlook RCE vulnerablility)

optiv/microsoft365_devicephish

A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow

davidhuser/mxmap

Automated pipeline that resolves Swiss municipality domains, scrapes websites for email addresses, and classifies email providers via MX, SPF, DKIM,…

bl4ckmamb4/openrelaymagic

Tool to find SMTP servers vulnerable to open relay

amavis/amavis

amavis is a high-performance email content filter framework written in Perl.

black-scorp10/email-vulnerability-checker

Automated SPF and DMARC configuration checker that identifies email spoofing vulnerabilities across single or bulk domains using DNS lookups.

rm1984/imaplogintester

A simple Python script that reads a text file with lots of e-mails and passwords, and tries to check if those credentials are valid by trying to…

portswigger/css-the-bomb-inside-your-inbox

All the materials for Gareth Heyes' Black Hat talk: CSS: the bomb inside your inbox.

rub-nds/johnny-you-are-fired

Artifacts for the USENIX publication.

bishopfox/spoofcheckselftest

Web application that lets you test if your domain is vulnerable to email spoofing

delivr-to/detections

A home for detection content developed by the delivr.to team

vncert-cc/0dayex-checker

Zeroday Microsoft Exchange Server checker (Virtual Patching checker)

bishopfox/spfmap

A program to map out SPF and DKIM records for a large number of domains

dcarrero/mboxshell

mboxShell. Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups (50GB+) without loading them…

duy-31/cve-2023-35636

Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC

pixelbubble/pastemonitor

Scrape Pastebin API to collect daily pastes, setup a wordlist and be alerted by email when you have a match.