MailFail: Who's Spoofing your Email, and How are they Doing it?

[@BlackHillsInformationSecurity]

✉ MailFail Extension (Firefox) and other resources m.ail.fail/ 🔗 Jack's list of DKIM selectors - github.com/ACK-J/MailFail/blob/main/DKIM_Selectors.txt - 🔗 Download the extension - addons.mozilla.org/en-US/firefox/addon/mailfail/ - 🔗 github repository - github.com/ACK-J/MailFail/ - 🔗 Reconstruct private keys from the two prime numbers - gist.github.com/ACK-J/487d0de5737458d953ca818a0645b09b - 🔗 Send DKIM signed emails script with a private key - gist.github.com/ACK-J/76585af46375641ec841cb6b77d345c3 - 🔗 Here's a bonus that wasn't in the presentation - Python script that takes in a list of domains and checks them for DMARC misconfigurations - gist.github.com/ACK-J/8a189bafbb54e00fb1b3f3e22dcd81c9 - 🛝 Webcast Slides - www.blackhillsinfosec.com/wp-content/uploads/2024/06/SLIDES_BHIS_MAILFAIL.pdf /// 🔗 Register for webcasts, summits, and workshops - blackhillsinfosec.zoom.us/ze/hub/stadium

[@FieranMason-Blakley]

Jack did great -- having someone technical give the webinar is fantastic. We got a good (review for me) technical explanation of SPF/DKIM/DMARC and why they really aren't that great. I'll stay tuned for more on the strength of this presentation --- the inclusion of misuse cases was one of the strongest points.

[@colud_5446]

This was an eye-opener! Specially with DKIM! Thanks

[@hs-learn2581]

Great presentation by Jack, appreciated your humor and demo's

[@bradnichols2180]

Really great talk. Thanks. With my brain absorption rate currently set so low however I will need to re-watch 9 more times :-)

[@piojo003]

awesome , thanks

[@hober91]

Great job

[@asdflkjasdfasdlfkj]

awesome ❤

[@BlackHillsInformationSecurity]

Thanks 🤗

[@logicbypass]

Awesome thx