Scans SPF and DMARC DNS records to identify vulnerabilities that could allow email spoofing attacks.
mailspoof is a Python-based security tool that scans SPF and DMARC DNS records to identify misconfigurations that could allow email spoofing. It helps organizations and security professionals detect vulnerabilities where attackers could impersonate legitimate domains, potentially bypassing email filters. The tool outputs structured JSON findings for easy analysis and integration.
Security professionals, penetration testers, red teamers, and IT administrators responsible for domain and email security who need to audit SPF and DMARC configurations.
Developers choose mailspoof for its focused, automated scanning of email authentication flaws, clear vulnerability reporting, and flexibility as both a CLI tool and Python library, making it ideal for security assessments and integration into automated workflows.
Scans SPF and DMARC records for issues that could allow email spoofing.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Specifically checks for critical SPF and DMARC misconfigurations like missing records or lax policies, as detailed in the issue codes table from 0 to 12 in the README.
Provides JSON output that can be easily parsed with tools like jq, enabling seamless integration into security pipelines and custom scripts, as shown in the CLI examples.
Offers a Python library for scanning domains programmatically, allowing customization and automation in security workflows, demonstrated in the Python usage section.
Supports scanning large lists of domains from files using the -iL flag, making it suitable for large-scale security assessments, as highlighted in the bulk domain scanning feature.
Unregistered domain detection requires a whoapi.com API key with free tier limits (500 calls), adding an external dependency and potential cost, as noted in the 'Checking Unregistered Domains' section.
Focuses only on SPF and DMARC, not covering other email authentication methods like DKIM, which are essential for comprehensive email security, limiting its use for full audits.
Lacks a graphical user interface, relying solely on command-line and Python, which may hinder adoption by users less familiar with terminal-based tools or those needing visual reports.