ghost-sender

Here are 2 public repositories matching this topic...

SanaullahAmanullah / ghost-sender

Exchange Online email spoofing PoC — Ghost Sender vulnerability. Delivers spoofed emails bypassing SPF, DKIM, and DMARC when external MX records are configured without a partner connector. Includes mail server with web UI, multi-recipient support, and CC.

proof-of-concept penetration-testing exchange-online security-tool email-spoofing microsoft-365 dmarc-bypass ghost-sender spf-bypass dkim-bypass

Updated Jun 10, 2026
Python

harrizuan / spoofscore

Star

11-layer email security scanner with spoofability scoring (0-100). Checks SPF, DKIM, DMARC, MTA-STS, DANE, BIMI, Ghost-Sender, EchoSpoofing, BreakSPF, and more. One command. One answer: SPOOFABLE or PROTECTED.

Updated Jul 26, 2026
Python

Improve this page

Add a description, image, and links to the ghost-sender topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the ghost-sender topic, visit your repo's landing page and select "manage topics."

Learn more