jetmore / jetmore/swaks

create smtp smuggling recipe

Open
#89 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Perl
Stars
1.3k
Forks
95
PR merge metrics
No merged PRs in 30d

Description

A user asked if a test for smtp smuggling could be added to swaks. Swaks is not a vul scanner and I don't want to add tests for specific vulnerabilities. However, I do support swaks being used as a scanner as people find it useful. Are there any features swaks is missing to craft a test for smtp smuggling? https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/

Note this fits well with the broad idea to make swaks use a DSL internally, then to translate "standard" functionality into that DSL. That would allow users to create novel combinations of transaction options without requiring swaks argument processing to directly support/implement each feature. If something like that existed, it would be relatively easy to add new edge cases like this locally

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing swaks's current transaction options and argument-processing paths, then compare them with the SMTP smuggling recipe described in the issue. Identify which capabilities are missing for composing this test and define what a DSL-based solution would need to support. The issue does not name files, tests, or a concrete completion target.

Written by the indexing model from the issue text.

Assessment

Tech stack
perl
Domain
cli
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.