chenjj / espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

Home Page:https://www.jianjunchen.com/p/composition-kills.USESEC20.pdf

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

SPF record location

ada86 opened this issue · comments

commented

Hi,

shouldn't the SPF be located directly on the domain and not under _spf subdomain?
attack.com TXT "v=spf1 ip4:1.2.3.4 ?all"
instead of
_spf.attack.com TXT "v=spf1 ip4:1.2.3.4 ?all"
??

Oh, my bad... I have changed it. Thanks for pointing it out. @ada86