Skip to content

MailSpoof — v1.0.0

Choose a tag to compare

@syed-sameer-ul-hassan syed-sameer-ul-hassan released this 04 Jun 16:29
· 13 commits to main since this release

MailSpoof v1.0.0 — Initial Release

Release Date: June 4, 2026

MailSpoof — Professional Email Spoofing and Phishing Simulation Framework for authorized penetration testing, red team exercises, and security awareness training.


What's New

Core Features

  • Built-in SMTP Server — Multi-threaded raw-socket SMTP server with optional MX relay for local testing
  • Email Crafting & Delivery — Send spoofed emails with custom headers, attachments, and HTML bodies
  • Audit Logging — Timestamped JSON logs for every send attempt with success/failure tracking
  • Report Generation — Automated JSON and terminal reports with success rates and security recommendations

Pre-Built Scenarios

  • CEO Fraud — Wire Transfer (Critical)
  • IT Support — Password Reset (High)
  • HR — Document Request (Medium)
  • Microsoft License Expired (High)
  • PayPal Security Alert (Critical)

Custom Templates

  • Create and load your own .html / .txt templates
  • Variable substitution support
  • Persistent storage in ~/.mailspoof/templates/

Cross-Platform Installer

  • Linux — Debian/Ubuntu .deb package + generic install.sh
  • Fedora/RHEL — RPM spec file (mailspoof.spec)
  • Arch LinuxPKGBUILD for AUR
  • macOS — Direct install via install.sh
  • Termux (Android) — Supported with pkg + pip fallback

CLI Commands

mailspoof start              # Interactive spoofing session
mailspoof list               # List all templates
mailspoof test <id> <email>  # Run built-in scenario
mailspoof create             # Create custom template
mailspoof custom             # Fully custom email test
mailspoof server             # Start SMTP server only
mailspoof logs               # View audit logs
mailspoof report             # Generate assessment report
mailspoof update             # Update from Git repo
mailspoof uninstall          # Remove MailSpoof

One-Line Install

curl -sL https://raw.githubusercontent.com/syed-sameer-ul-hassan/MailSpoof/main/install.sh | bash

GitHub Repository Features

  • SEO-optimized issue templates (bug report, feature request, SEO optimization)
  • FUNDING.yml — GitHub Sponsors + custom donation link
  • Apache-2.0 License
  • Single-branch contribution model (main only)

Requirements

  • Python 3.8+
  • dnspython (auto-installed)

Legal Notice

This tool is intended for authorized security testing and educational purposes only.

The author will not be responsible for any misuse of this software. Users must ensure they have explicit written permission from the target organization before conducting any email spoofing or phishing simulation activities.


Support


Full Changelog

See docs/CHANGELOG.md for detailed version history.