{"id":28391509,"url":"https://github.com/triotion/email-spoofing","last_synced_at":"2025-06-25T21:31:23.224Z","repository":{"id":288712565,"uuid":"903449990","full_name":"Triotion/email-spoofing","owner":"Triotion","description":"Advanced Email Spoofing","archived":false,"fork":false,"pushed_at":"2025-04-19T05:26:40.000Z","size":31,"stargazers_count":1,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-05-31T20:05:10.167Z","etag":null,"topics":["dmarc","email","email-sender","email-signature","email-spoof","email-spoofer-tool","email-spoofing","security-tools","spoof"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Triotion.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2024-12-14T16:29:07.000Z","updated_at":"2025-05-15T21:51:52.000Z","dependencies_parsed_at":"2025-04-23T03:01:31.188Z","dependency_job_id":null,"html_url":"https://github.com/Triotion/email-spoofing","commit_stats":null,"previous_names":["triotion/email-spoofing"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/Triotion/email-spoofing","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Triotion%2Femail-spoofing","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Triotion%2Femail-spoofing/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Triotion%2Femail-spoofing/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Triotion%2Femail-spoofing/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Triotion","download_url":"https://codeload.github.com/Triotion/email-spoofing/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Triotion%2Femail-spoofing/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":261955975,"owners_count":23235991,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dmarc","email","email-sender","email-signature","email-spoof","email-spoofer-tool","email-spoofing","security-tools","spoof"],"created_at":"2025-05-31T09:39:25.926Z","updated_at":"2025-06-25T21:31:23.216Z","avatar_url":"https://github.com/Triotion.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Advanced Email Spoofing Demonstration\r\n\r\nThis repository contains Python scripts that demonstrate how email spoofing works for **educational purposes only**. Email spoofing is a technique used to forge email headers so that messages appear to originate from someone other than the actual sender.\r\n\r\n[![GitHub](https://img.shields.io/badge/github-Triotion-blue?style=flat\u0026logo=github)](https://github.com/Triotion/)\r\n[![License](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)\r\n[![Python 3.6+](https://img.shields.io/badge/python-3.6+-blue.svg)](https://www.python.org/downloads/)\r\n\r\n## ⚠️ Disclaimer\r\n\r\n**This tool is meant for educational purposes only.** Using this tool to send deceptive emails without consent is:\r\n\r\n- **Illegal** in most jurisdictions\r\n- **Unethical**\r\n- May violate terms of service for email providers\r\n- Could result in your IP/account being blacklisted\r\n\r\nThe author assumes no responsibility for any misuse of this information or script.\r\n\r\n## Features\r\n\r\n- Basic email spoofing with custom From header\r\n- Advanced header manipulation\r\n- Custom X-header generation\r\n- Support for multiple recipients (To, CC, BCC)\r\n- File attachments\r\n- Reply-To address customization\r\n- HTML email templates\r\n- Debug mode for troubleshooting\r\n- Bulk testing of SMTP servers from a file\r\n- Multi-threaded SMTP server testing\r\n- Colorized console output\r\n\r\n## Requirements\r\n\r\n- Python 3.6 or later\r\n- Required Python packages:\r\n  - colorama\r\n- Access to an SMTP server (most email providers will require authentication)\r\n- SMTP server that allows header manipulation (many public email services now block this)\r\n\r\n## Installation\r\n\r\n```bash\r\ngit clone https://github.com/Triotion/email-spoofing.git\r\ncd email-spoofing\r\npip install colorama\r\n```\r\n\r\n## Basic Usage\r\n\r\n```bash\r\npython email_spoofer.py --server smtp.example.com --port 587 --user your_email@example.com --password your_password --from-name \"Spoofed Name\" --from-email spoofed@example.com --to recipient@example.com --subject \"Test Subject\" --message \"\u003ch1\u003eThis is a test\u003c/h1\u003e\u003cp\u003eThis email demonstrates spoofing.\u003c/p\u003e\"\r\n```\r\n\r\n### Using SMTP Server File\r\n\r\nYou can provide multiple SMTP servers in a file and the script will test them all to find working ones:\r\n\r\n```bash\r\npython advanced_email_spoofer.py --smtp-file smtp_servers.txt --from-name \"Spoofed Name\" --from-email spoofed@example.com --to recipient@example.com --subject \"Test Subject\" --message \"This is a test message\"\r\n```\r\n\r\nThe SMTP server file format is simple:\r\n```\r\nhost|port|username|password\r\n```\r\n\r\nFor example:\r\n```\r\nsmtp.example.com|587|user@example.com|password123\r\nsmtp.another.com|465|admin@another.com|securepass\r\n```\r\n\r\n### Advanced SMTP Testing \r\n\r\nYou can test which SMTP servers are working without sending emails:\r\n\r\n```bash\r\npython advanced_email_spoofer.py --smtp-file smtp_servers.txt --test-only --threads 10\r\n```\r\n\r\nThis will:\r\n1. Test all SMTP servers in the file\r\n2. Use 10 threads to speed up the testing process\r\n3. Show which servers are working\r\n4. Exit without sending any emails\r\n\r\n### Command Line Arguments\r\n\r\n#### SMTP Settings:\r\n- `--server`: SMTP server address\r\n- `--port`: SMTP server port (default: 587)\r\n- `--user`: SMTP username (typically your real email)\r\n- `--password`: SMTP password\r\n- `--smtp-file`: File containing SMTP credentials in format \"host|port|username|password\"\r\n- `--test-only`: Only test SMTP servers, don't send emails\r\n- `--threads`: Number of threads for testing SMTP servers (default: 5)\r\n- `--debug`: SMTP debug level (0-2)\r\n\r\n#### Spoofing Parameters:\r\n- `--from-name`: Display name you want to show as the sender\r\n- `--from-email`: Email address you want to show as the sender\r\n- `--reply-to`: Reply-to email address\r\n- `--to`: Recipient email(s), comma separated\r\n- `--cc`: CC recipient(s), comma separated\r\n- `--bcc`: BCC recipient(s), comma separated\r\n- `--subject`: Email subject\r\n- `--message`: Email body content (HTML supported)\r\n- `--plain-text`: Send as plain text instead of HTML\r\n- `--attach`: File(s) to attach (can be used multiple times)\r\n- `--add-xheaders`: Add fake X-headers to make email look more legitimate\r\n- `--custom-header`: Add custom header in format \"Header:Value\" (can be used multiple times)\r\n\r\n## Usage Examples\r\n\r\n### Basic Email Spoofing\r\n\r\n#### Example 1: Basic spoofed email\r\n\r\n```bash\r\npython email_spoofer.py \\\r\n  --server smtp.example.com \\\r\n  --port 587 \\\r\n  --user your_real_email@example.com \\\r\n  --password your_password \\\r\n  --from-name \"John Smith\" \\\r\n  --from-email ceo@company.com \\\r\n  --to victim@example.com \\\r\n  --subject \"Urgent: Action Required\" \\\r\n  --message \"Please review the attached document and respond ASAP.\"\r\n```\r\n\r\n#### Example 2: Using HTML content\r\n\r\n```bash\r\npython email_spoofer.py \\\r\n  --server smtp.example.com \\\r\n  --port 587 \\\r\n  --user your_real_email@example.com \\\r\n  --password your_password \\\r\n  --from-name \"IT Department\" \\\r\n  --from-email it-support@company.com \\\r\n  --to victim@example.com \\\r\n  --subject \"Password Reset Required\" \\\r\n  --message \"\u003ch2\u003eSecurity Alert\u003c/h2\u003e\u003cp\u003eYour password needs to be reset. \u003ca href='https://example.com'\u003eClick here\u003c/a\u003e to reset.\u003c/p\u003e\"\r\n```\r\n\r\n### Advanced Email Spoofing\r\n\r\n#### Example 1: Using the HTML template\r\n\r\n```bash\r\n# First, read the HTML template\r\nTEMPLATE=$(cat email_template.html)\r\n\r\n# Then use it in the command\r\npython advanced_email_spoofer.py \\\r\n  --server smtp.example.com \\\r\n  --port 587 \\\r\n  --user your_real_email@example.com \\\r\n  --password your_password \\\r\n  --from-name \"Security Team\" \\\r\n  --from-email security@trusted-company.com \\\r\n  --reply-to support@trusted-company.com \\\r\n  --to victim@example.com \\\r\n  --subject \"Security Alert: Verify Your Account\" \\\r\n  --message \"$TEMPLATE\"\r\n```\r\n\r\n#### Example 2: Adding custom headers and X-headers\r\n\r\n```bash\r\npython advanced_email_spoofer.py \\\r\n  --server smtp.example.com \\\r\n  --port 587 \\\r\n  --user your_real_email@example.com \\\r\n  --password your_password \\\r\n  --from-name \"PayPal Security\" \\\r\n  --from-email security@paypal.com \\\r\n  --to victim@example.com \\\r\n  --subject \"Your account has been limited\" \\\r\n  --message \"\u003cp\u003eDear customer,\u003c/p\u003e\u003cp\u003eYour PayPal account has been temporarily limited. Please \u003ca href='https://example.com'\u003everify your information\u003c/a\u003e to restore access.\u003c/p\u003e\" \\\r\n  --add-xheaders \\\r\n  --custom-header \"List-Unsubscribe: \u003cmailto:unsubscribe@paypal.com\u003e\" \\\r\n  --custom-header \"Precedence: bulk\"\r\n```\r\n\r\n#### Example 3: Using SMTP servers from a file\r\n\r\n```bash\r\npython advanced_email_spoofer.py \\\r\n  --smtp-file smtp_servers.txt \\\r\n  --from-name \"HR Department\" \\\r\n  --from-email hr@company.com \\\r\n  --to \"employee1@example.com,employee2@example.com\" \\\r\n  --cc \"manager@example.com\" \\\r\n  --subject \"Updated Company Policy\" \\\r\n  --message \"\u003cp\u003ePlease find attached the updated company policy document.\u003c/p\u003e\u003cp\u003eAll employees must read and acknowledge by Friday.\u003c/p\u003e\" \\\r\n  --attach policy_document.pdf\r\n```\r\n\r\n#### Example 4: Testing SMTP servers only\r\n\r\n```bash\r\npython advanced_email_spoofer.py \\\r\n  --smtp-file smtp_servers.txt \\\r\n  --test-only \\\r\n  --threads 10\r\n```\r\n\r\n## Why This Doesn't Always Work\r\n\r\nModern email systems have multiple protections against spoofing:\r\n\r\n1. **SPF (Sender Policy Framework)**: Validates if the sending server is authorized to send emails for the domain\r\n2. **DKIM (DomainKeys Identified Mail)**: Cryptographically verifies email authenticity\r\n3. **DMARC (Domain-based Message Authentication, Reporting \u0026 Conformance)**: Policy framework that uses SPF and DKIM results\r\n\r\nThese protections mean that while you can change the \"From\" header, receiving mail servers can detect that the email wasn't actually sent from the claimed domain, often marking such emails as spam or rejecting them entirely.\r\n\r\n## Anti-Spoofing Measures\r\n\r\nTo protect yourself from email spoofing:\r\n\r\n- Check email headers for discrepancies\r\n- Be suspicious of unexpected emails, especially those requesting sensitive information\r\n- Enable SPF, DKIM, and DMARC for your own domains\r\n- Use email providers that implement strong anti-spoofing measures\r\n\r\n## Legal Use Cases\r\n\r\nLegitimate reasons to understand email spoofing include:\r\n\r\n- Security research and education\r\n- Penetration testing (with proper authorization)\r\n- Testing your own email security systems\r\n\r\n## Important Notes\r\n\r\n1. Most modern email services will detect spoofed emails and mark them as spam or reject them entirely.\r\n\r\n2. To see the email headers that were actually received, ask the recipient to view the full headers of the email.\r\n\r\n3. For testing, it's recommended to send to email accounts you control.\r\n\r\n4. Some email providers (like Gmail) may rewrite your From header to include your actual authenticated email, such as:\r\n   ```\r\n   From: \"John Smith via your-email@gmail.com\" \u003cyour-email@gmail.com\u003e\r\n   ```\r\n\r\n## Donations\r\n\r\nIf you find this tool valuable, consider donating to support ongoing development:\r\n\r\n- **BTC**: bc1qtkm7dzjp76gx8t9c02pshfd8rzarj6gj9yzglu\r\n- **ETH**: 0x88Aa0E09a5A62919321f38Fb4782A17f4dc91A9B\r\n- **XMR**: 0x6730c52B3369fD22E3ACc6090a3Ee7d5C617aBE0\r\n\r\n## Author\r\n\r\nCreated by [@Triotion](https://github.com/Triotion/) - [Telegram](https://t.me/Triotion)\r\n\r\n## License\r\n\r\nThis project is licensed under the MIT License - see the LICENSE file for details. ","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftriotion%2Femail-spoofing","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftriotion%2Femail-spoofing","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftriotion%2Femail-spoofing/lists"}