chenjj/espoofer

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1745 stars · 281 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

espoofer is a Python-based testing tool that crafts spoofed emails to bypass SPF, DKIM, and DMARC authentication, including forged DKIM signatures. It packages research-identified attack cases to help mail server administrators and penetration testers assess whether email servers and clients are vulnerable to sender spoofing.

Use cases

• test whether my mail server is vulnerable to SPF/DKIM/DMARC bypass attacks
• check if email clients can be tricked by spoofed sender addresses
• run email sender spoofing test cases during a penetration test
• verify DKIM signature forgery against a target email system
• audit email authentication configuration after deploying SPF and DMARC
• reproduce email sender spoofing research attacks from the USENIX 2020 paper

When to choose

• you administer a mail server and want to validate your SPF/DKIM/DMARC defenses
• you are a security practitioner testing email spoofing exposure of an organization
• you need a ready-made suite of known email authentication bypass test cases

When to avoid

• you want to send legitimate bulk or transactional email
• you need a general-purpose email sending library or SMTP client
• you lack authorization to test the target email system

Facets

cli-tool · maturity maintenance

penetration-testing security email testing security penetration-testing email python cli cross-platform email-spoofing spf dkim dmarc smtp phishing-testing security-audit

Member repositories

For agents

markdown · JSON · MCP: product_card(name="chenjj/espoofer")