mx/spf-takeover

Features • Installation • Usage

mx/spf-takeover focuses DNS records and detects misconfigured MX 6 SPF records. It currently supports three technique. These are,

• MX/SPF domains that will expire soon
• Unregistered MX domains
• Unregistered SPF domains

Features

• Unregistered/expire MX/SPF domain
• MX/SPF Domain that will expire soon
• Domains that used same MX records
• Saving scan results as json format
• Support for concurrency

Installation Instructions

mx-spf-takeover requires go1.17 to install successfully. Run the following command to install.

go install -v github.com/zi0Black/mx-spf-takeover@latest

Usage

mx-spf-takeover -h

This will display help for the tool.

┌──(root㉿kali)-[/home/mx-spf-takeover]
└─# mx-spf-takeover -h


 /$$      /$$ /$$   /$$       /$$ /$$$$$$  /$$$$$$$  /$$$$$$$$        /$$               /$$                                                        
| $$$    /$$$| $$  / $$      /$$//$$__  $$| $$__  $$| $$_____/       | $$              | $$                                                        
| $$$$  /$$$$|  $$/ $$/     /$$/| $$  \__/| $$  \ $$| $$            /$$$$$$    /$$$$$$ | $$   /$$  /$$$$$$   /$$$$$$  /$$    /$$ /$$$$$$   /$$$$$$ 
| $$ $$/$$ $$ \  $$$$/     /$$/ |  $$$$$$ | $$$$$$$/| $$$$$ /$$$$$$|_  $$_/   |____  $$| $$  /$$/ /$$__  $$ /$$__  $$|  $$  /$$//$$__  $$ /$$__  $$
| $$  $$$| $$  >$$  $$    /$$/   \____  $$| $$____/ | $$__/|______/  | $$      /$$$$$$$| $$$$$$/ | $$$$$$$$| $$  \ $$ \  $$/$$/| $$$$$$$$| $$  \__/
| $$\  $ | $$ /$$/\  $$  /$$/    /$$  \ $$| $$      | $$             | $$ /$$ /$$__  $$| $$_  $$ | $$_____/| $$  | $$  \  $$$/ | $$_____/| $$      
| $$ \/  | $$| $$  \ $$ /$$/    |  $$$$$$/| $$      | $$             |  $$$$/|  $$$$$$$| $$ \  $$|  $$$$$$$|  $$$$$$/   \  $/  |  $$$$$$$| $$      
|__/     |__/|__/  |__/|__/      \______/ |__/      |__/              \___/   \_______/|__/  \__/ \_______/ \______/     \_/    \_______/|__/


hunting misconfigured MX & SPF records
@zi0Black | original work by @musana

  -check-whois
        Check whois for detecting unregistered mx domain or will be expire soon
  -expire-day int
        Estimated days for expiration (default 30)
  -h    help
  -output string
        Save output to file as json
  -show-only-mx
        show only that have mx records
  -v    Print all log
  -w int
        number of worker (default 8)

Thanks

@musana - https://github.com/musana/mx-takeover