create smtp smuggling recipe
- Dominant language
- Perl
- Stars
- 1.3k
- Forks
- 95
- PR merge metrics
- No merged PRs in 30d
Description
A user asked if a test for smtp smuggling could be added to swaks. Swaks is not a vul scanner and I don't want to add tests for specific vulnerabilities. However, I do support swaks being used as a scanner as people find it useful. Are there any features swaks is missing to craft a test for smtp smuggling? https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/
Note this fits well with the broad idea to make swaks use a DSL internally, then to translate "standard" functionality into that DSL. That would allow users to create novel combinations of transaction options without requiring swaks argument processing to directly support/implement each feature. If something like that existed, it would be relatively easy to add new edge cases like this locally
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing swaks's current transaction options and argument-processing paths, then compare them with the SMTP smuggling recipe described in the issue. Identify which capabilities are missing for composing this test and define what a DSL-based solution would need to support. The issue does not name files, tests, or a concrete completion target.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- perl
- Domain
- cli
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100