Looking for red team tools that enable email domain spoofing (DMARC=none). Suggestions?

Hey everyone. I consider myself a somewhat knowledgeable SysAdmin on how to get my clients to p=reject DMARC status. I value the importance of having properly configured DMARC/DKIM/SPF. That said, for willing clients, I'd like to demo the importance of why these signals are so important.

Can anyone point me to a good resource on spinning up a tool to make this possible?

submitted by /u/rb3po
[link] [comments]

from hacking: security in practice https://ift.tt/VZwDmhn

Comments