Welcome to gosurp!

GoSurp is a cli tool to work on email and DNS usurpation. It is written in Go and is distributed as a single binary without any external dependencies.

Getting Started

This site is powered by Nextra (opens in a new tab). Nextra is a new kind of static site generator that uses modern JavaScript under Next.JS, components, and build tools to build your site. It's fast, lightweight, and easy to use.

Get started with gosurp →

View recipes

There are several kind of exploitations that can be made on SMTP protocole and it's implementation. Using research document and documentation I made some recipes for well know bypass and exploits allowing you to test it directly using gosurp.

Some recipes:

• Ambiguous domains →
• EHLO/MAIL FROM confusion →
• Authentication results injection →

Project License