MailSpoof — v1.0.0
·
13 commits
to main
since this release
MailSpoof v1.0.0 — Initial Release
Release Date: June 4, 2026
MailSpoof — Professional Email Spoofing and Phishing Simulation Framework for authorized penetration testing, red team exercises, and security awareness training.
What's New
Core Features
- Built-in SMTP Server — Multi-threaded raw-socket SMTP server with optional MX relay for local testing
- Email Crafting & Delivery — Send spoofed emails with custom headers, attachments, and HTML bodies
- Audit Logging — Timestamped JSON logs for every send attempt with success/failure tracking
- Report Generation — Automated JSON and terminal reports with success rates and security recommendations
Pre-Built Scenarios
- CEO Fraud — Wire Transfer (Critical)
- IT Support — Password Reset (High)
- HR — Document Request (Medium)
- Microsoft License Expired (High)
- PayPal Security Alert (Critical)
Custom Templates
- Create and load your own
.html/.txttemplates - Variable substitution support
- Persistent storage in
~/.mailspoof/templates/
Cross-Platform Installer
- Linux — Debian/Ubuntu
.debpackage + genericinstall.sh - Fedora/RHEL — RPM spec file (
mailspoof.spec) - Arch Linux —
PKGBUILDfor AUR - macOS — Direct install via
install.sh - Termux (Android) — Supported with
pkg+pipfallback
CLI Commands
mailspoof start # Interactive spoofing session
mailspoof list # List all templates
mailspoof test <id> <email> # Run built-in scenario
mailspoof create # Create custom template
mailspoof custom # Fully custom email test
mailspoof server # Start SMTP server only
mailspoof logs # View audit logs
mailspoof report # Generate assessment report
mailspoof update # Update from Git repo
mailspoof uninstall # Remove MailSpoofOne-Line Install
curl -sL https://raw.githubusercontent.com/syed-sameer-ul-hassan/MailSpoof/main/install.sh | bashGitHub Repository Features
- SEO-optimized issue templates (bug report, feature request, SEO optimization)
FUNDING.yml— GitHub Sponsors + custom donation link- Apache-2.0 License
- Single-branch contribution model (
mainonly)
Requirements
- Python 3.8+
dnspython(auto-installed)
Legal Notice
This tool is intended for authorized security testing and educational purposes only.
The author will not be responsible for any misuse of this software. Users must ensure they have explicit written permission from the target organization before conducting any email spoofing or phishing simulation activities.
Support
- Issues: https://github.com/syed-sameer-ul-hassan/MailSpoof/issues
- Security: See SECURITY.md
- Author: Syed Sameer Ul Hassan
Full Changelog
See docs/CHANGELOG.md for detailed version history.