KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #ai-agents #developer-tools #codex #claude-code #mcp #rust #deepseek-harness #typescript #ai-agent #cli

mxcheck

★ 145 Open GitHub ↗

mxcheck is an info and security scanner for e-mail servers.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

![mxcheck logo](https://raw.githubusercontent.com/steffenfritz/mxcheck/main/resources/mxcheck_logo_250x.png)

mxcheck is an info scanner for e-mail servers.

It checks
  * DNS records: A, MX, PTR, SPF, MTA-STS, DKIM, DMARC (fully parsed), TLSRPT, BIMI
  * DANE/TLSA records per MX host (RFC 6698, RFC 7672): usage, selector, matching type, certificate data
  * AS Number and AS Country
  * the support of StartTLS and the certificate
  * TLS certificate details on port 465: expiry date, Subject CN, Issuer CN, SANs
  * open ports: 25, 465, 587
  * if the service is listed by blacklists
  * if it leaks information by server string and VRFY command
  * if the e-mail server is vulnerable to SMTPSmuggling
  * and if the server is an open relay

You can set mailFrom, mailTo, the DNS server, DKIM selector and output a report in tsv format.

-b, --blacklist          Check if the service is on blacklists
    -d, --dnsserver string   The dns server to be requested (default "8.8.8.8")
    -g, --smuggle            Scan for SMTPSmuggling vulnerability
    -p, --disable-port-scan  Disable SMTP port scan
    -f, --mailfrom string    Set the mailFrom address (default "info@foo.wtf")
    -t, --mailto string      Set the mailTo address (default "info@baz.wtf")
    -n, --no-prompt          Answer yes to all questions
    -s, --service string     The service host to check (mandatory flag)
    -S, --dkim-selector      The DKIM selector. If set a dkim check is performed on the provided service domain
    -V, --verbose            Show timestamps in output
    -v, --version            Version and license
    -u, --updatecheck        Check if a new version of mxcheck is available
    -w, --write-tsv          Write tsv formated report to file

# Version

v2.0.0

[![Go Reference](https://pkg.go.dev/badge/github.com/steffenfritz/mxcheck.svg)](https://pkg.go.dev/github.com/steffenfritz/mxcheck)
[![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](https://www.gnu.org/licenses/gpl-3.0)
[![Build status](https://ci.appveyor.com/api/projects/status/l6d32n4ax02f6ku2?svg=true)](https://ci.appveyor.com/project/steffenfritz/mxcheck)
[![Reviewed by Hound](https://img.shields.io/badge/Reviewed_by-Hound-8E64B0.svg)](https://houndci.com)
[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/steffenfritz/mxcheck/badge)](https://scorecard.dev/viewer/?uri=github.com/steffenfritz/mxcheck)
[![OpenSSF Best Practices](https://www.bestpractices.dev/projects/9171/badge)](https://www.bestpractices.dev/projects/9171)

[![Kali](https://img.shields.io/badge/Kali-268BEE?style=for-the-badge&logo=kalilinux&logoColor=white)](https://www.kali.org/tools/mxcheck/)

# Installation

go install github.com/steffenfritz/mxcheck@v2.0.0
    
or

download a pre-compiled binary.

use Kali Linux repositories

# Usage Example

./mxcheck -s 2600.com
    ./mxcheck -s 2600.com -v
    ./mxcheck -s 2600.com -d 8.8.8.8
    ./mxcheck -s 2600.com -n -f info@baz.com -t boss@foo.org -w -S default
    ./mxcheck -s 2600.com -n -f info@baz.com -t boss@foo.org -w -S default -b -g
    
   [![asciicast](https://asciinema.org/a/471229.svg)](https://asciinema.org/a/471229)
    
    
# Check for authentication

There is no check whether the server needs authentication. However, you can do two runs:

The first one uses a from and to address outside the mail server's scope, e.g.:

./mxcheck -s example.com -f info@baz.com -t boss@foo.org

The second one uses a from and a to address from the mail server's scope, e.g.:

./mxcheck -s example.com -f info@example.com -t boss@example.com

If the first one returns ``Server is not an open relay`` and the second one returns `Server is probably an open relay` the server is not an open relay, but you can send mails from local to local addresses without authentication.

# Documentation and contact

mxcheck has a man page :)

Furthermore, you can find a documentation and contact information here: https://mxcheck.fritz.wtf

The logo was created by Alex/Lignum5. Thanks, mate :)

mxcheck

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README