Spoofy

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

Usage and Examples

Spoofy requires Python 3+. Python 2 is not supported. Usage is shown below:

Usage:
    ./spoofy.py -d [DOMAIN]
    OR
    ./spoofy.py  -iL [DOMAIN_LIST]
    
Install Dependencies:
    pip3 install -r requirements.txt

Domain are spoofable if the following conditions are met:

Disclaimer

This tool is only for testing and academic purposes and can only be used where strict consent has been given. Do not use it for illegal purposes! It is the end user’s responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this tool and software.

Credit

Tool was heavily inspired by Bishop Fox's project called spoofcheck. Also big thank you to Calamity for the dmarc and spf insights!

License

This project is licensed under the GPLv3 License - see the LICENSE file for details