Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/MarkoH17/EmailSecCheck
EmailSecCheck is a lightweight Python utility used to check for common SPF/DMARC misconfigurations that may allow for email spoofing.
https://github.com/MarkoH17/EmailSecCheck
dmarc-record email-security pentesting spf-record
Last synced: about 2 months ago
JSON representation
EmailSecCheck is a lightweight Python utility used to check for common SPF/DMARC misconfigurations that may allow for email spoofing.
- Host: GitHub
- URL: https://github.com/MarkoH17/EmailSecCheck
- Owner: MarkoH17
- Created: 2021-10-26T18:18:45.000Z (almost 3 years ago)
- Default Branch: main
- Last Pushed: 2023-03-16T15:01:20.000Z (over 1 year ago)
- Last Synced: 2024-06-03T09:47:59.570Z (4 months ago)
- Topics: dmarc-record, email-security, pentesting, spf-record
- Language: Python
- Homepage:
- Size: 8.79 KB
- Stars: 17
- Watchers: 2
- Forks: 7
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- jimsghstars - MarkoH17/EmailSecCheck - EmailSecCheck is a lightweight Python utility used to check for common SPF/DMARC misconfigurations that may allow for email spoofing. (Python)
README
# What is EmailSecCheck?
EmailSecCheck is a lightweight Python utility that checks whether email security DNS records (DMARC and SPF) are configured properly for a domain. EmailSecCheck is powered by [checkdmarc](https://github.com/domainaware/checkdmarc), and leverages it to identify common misconfigurations in DNS records that may enable for email spoofing.
Email spoofing is identified under the following conditions:
- SPF Issues
- SPF configured as something other than `fail` or `softfail`
- SPF record is missing
- SPF record contains a syntax error
- DMARC Issues
- Multiple SPF records exist
- DMARC record is missing
- DMARC record contains a syntax error
- Multiple DMARC records exist
# Getting Started
Grab the latest release and install the package requirements by running `pip3 install -r requirements.txt`. EmailSecCheck was developed for Python 3.
## Checking DNS Records for a Single Domain
```
python3 emailseccheck.py --domain
```
## Checking DNS Records for Several Domains
```
python3 emailseccheck.py --domains_file
```
## Example
