Find injection and spoofing flaws in your emails.
What it does
Guides testing of email-sending features for header injection, sender spoofing, and authentication weaknesses.
When to use it
Use when testing contact forms, email APIs, password resets, or other features that construct SMTP messages with user-controlled fields.
How to use it
Give it an email-sending feature to test; it checks injected headers and email authentication records to identify weaknesses.
What you provide
- the email-sending feature to test
Good to know
- cannot be undone: email recipients
Latest review
What you need · 1
Uses dig to query the target domain's SPF and DMARC DNS records.
Access · 3
This skill
email recipients
Write
Sends injected test emails (irreversible)
received email headers
Read
Inspects received email headers
the target domain's DNS records
Read
Checks email authentication DNS records