mailinabox
mail-in-a-box/mailinaboxMail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server…
configuration-auditingdefensive-toolsemail-security+3
15.4k
mail-in-a-box/mailinaboxMail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server…
api0cradle/cve-2023-23397-poc-powershellPowerShell script to exploit CVE-2023-23397 by sending or saving malicious Outlook calendar invitations that trigger NTLM credential leakage via the…
uilicious/inboxkittenDisposable email inbox powered by serverless mailgun kittens
trackflaw/cve-2023-23397Simple PoC of the CVE-2023-23397 vulnerability with the payload sent by email.
0neb1n/cve-2020-16947Proof-of-concept exploit for CVE-2020-16947, a Microsoft Outlook RCE triggered by malformed HTML content leading to a heap buffer overflow and remote…
rm1984/imaplogintesterA simple Python script that reads a text file with lots of e-mails and passwords, and tries to check if those credentials are valid by trying to…
delivr-to/detectionsA home for detection content developed by the delivr.to team
pixelbubble/pastemonitorScrape Pastebin API to collect daily pastes, setup a wordlist and be alerted by email when you have a match.
0neb1n/cve-2020-1493Technical analysis and PoC details for CVE-2020-1493, a zero-click Outlook RCE triggered by malformed MS-TNEF attachments leading to remote code…
ashwesker/ashwesker-cve-2025-68645POC BLH Magelang CSIRT 2026 by babyrootkid
roxanne_ardary/emailxposeEmailXpose is an open source AI-powered email security system that detects phishing, spam, scams, malware, and social engineering attacks. It goes…
cyberdudebivash/cyberdudebivash-cisco-asyncos-cve-2025-20393-scannerThis tool helps identify exposure to CVE-2025-20393 by checking for open TCP/6025 ports, responsive Spam Quarantine interfaces, and known…
h3x0v3rl0rd/smtp_userenumPython script for enumerating SMTP users by leveraging VRFY and EXPN commands to identify valid email accounts on a target mail server.
byt3l0rd/cve-2026-73570Python proof-of-concept for testing SMTP command injection (CVE-2026-73570) by sending malformed RCPT TO addresses to detect shell command…
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
rspamd/rspamdSpam filtering and email processing framework with regex rules, statistical analysis, custom Lua plugins, and external blocklists for MTA integration.
fgribreau/mailchecker:mailbox: Cross-language temporary (disposable/throwaway) email detection library. Covers 55 734+ fake email providers.
mdsecactivebreach/o365-attack-toolkitA toolkit to attack Office365