Skip to content

MailSpoof — v1.1.0

Choose a tag to compare

View all tags
@syed-sameer-ul-hassan syed-sameer-ul-hassan released this 06 Jun 14:30
· 4 commits to main since this release
v1.1.0
7eec163

MailSpoof v1.1.0 Release Notes

Release Date: 2026-06-06

What's New

Expanded Template Library — 45+ Scenarios

MailSpoof now ships with 45 built-in phishing templates, up from 5 in v1.0.0. New categories include:

  • Social Media: LinkedIn, Facebook, Instagram, Twitter/X, TikTok, Snapchat, Pinterest, Reddit, Discord, Twitch, Meta Ads
  • SaaS / Cloud: Slack, Zoom, Outlook, Google Workspace, Dropbox, OneDrive, Microsoft Teams, WhatsApp
  • Developer Platforms: GitHub OAuth, GitHub SSO, GitLab OAuth, Bitbucket Access, Salesforce MFA
  • Consumer Services: Spotify, Netflix, Airbnb, Uber, Amazon, Prime Video, Apple ID
  • Financial / Cloud: AWS Root Access, PayPal Invoice, Bank Account Suspension
  • HR / BEC: HR Benefits, Overdue Invoice, Payment Authorization CFO

All templates feature realistic HTML layouts, branded imagery, and styled CTA buttons.

Template Management Commands

Command Description
mailspoof preview <id> Preview a template body (HTML stripped by default; use --raw for source)
mailspoof edit-template <id> Open a template in $EDITOR (default: nano) with auto-reload after save
mailspoof remove-template <id> Delete custom templates (built-ins are protected)
mailspoof list --filter <text> Search templates by name, category, tags, or body content

Custom templates are auto-assigned IDs and support {TODAY} date substitution.

SMTP Profile Management

Save and reuse relay configurations with named profiles:

mailspoof profile add gmail --host smtp.gmail.com --port 587 --user me@gmail.com --use-tls
mailspoof test 1 target@example.com --profile gmail
  • mailspoof profile list — Show all saved profiles
  • mailspoof profile add <name> — Save a new profile
  • mailspoof profile remove <name> — Delete a profile

Profiles are stored securely in ~/.mailspoof/config.json.

Verbose Diagnostics

Use --verbose on any send command to see stage-by-stage SMTP output:

mailspoof test 1 target@example.com --verbose

Output includes: connection, STARTTLS, authentication, and send status.

Reporting Improvements

  • CSV export: mailspoof report --format csv generates spreadsheet-ready reports
  • Per-test error details: Failure reasons are now captured in the audit log and CSV output

Desktop Integration

  • Linux .desktop entry with application icon
  • install.sh auto-installs icon and launcher on supported desktops
  • Run MailSpoof directly from your applications menu

Fixes & Improvements

  • Installer: Direct pip install (no venv wrapper), supports both system-wide and user installs
  • Entry point: Console script correctly routes to lib.cli:main
  • Template loading: Built-ins load reliably from lib/templates/builtins/ across all install types
  • Uninstaller: Inline fallback removes wrappers, config, templates, and pip package cleanly
  • Email format: Switched to multipart/alternative MIME with HTML + plain text fallback
  • HTML preview: Terminal preview strips HTML for readable output
  • Custom templates: Saved to dedicated ~/.mailspoof/templates/custom/ subfolder

Upgrade Instructions

cd /path/to/MailSpoof
bash install.sh

Or update via Git if installed from source:

mailspoof update

Full Changelog

See CHANGELOG.md for the complete version history.

Assets 2
Loading