gosurp

GoSurp is a cli tool to work on email and DNS usurpation. It is written in Go and is distributed as a single binary without any external dependencies.

gosurp -h

This will display help for the tool. Here are all the switches it supports.

Inspect DNS Record

First of all, Gosurp allow you to inpect DNS records.

gosurp inspect domain <yourdomain.com>

You can also look for specific DNS records using:

gosurp inspect (spf/dkim/dmarc) <yourdomain.com>

Email usurpation

First of all, to allow you working on building the good mail without sending it, you can use the following command to start a local SMTP server that will print the mail content in the console like a debugger.

gosurp smtp listen -vvv
# or
gosurp smtp listen --hostname localhost --port 2525 -vvv

Then, you can use the following command to send a mail using the local SMTP server.

gosurp smtp send -vvv --from attacker@fsociety.local --to victim@localhost --port 2525

Contributing

We want to make gosurp a community-driven tool where everyone should be able to contribute. No matter what type of contribution you want to bring to us, we will consider it for sure. You can learn more about our contribution process in the following document.