Exchange Online email spoofing PoC — Ghost Sender vulnerability. Delivers spoofed emails bypassing SPF, DKIM, and DMARC when external MX records are configured without a partner connector. Includes mail server with web UI, multi-recipient support, and CC.
proof-of-concept penetration-testing exchange-online security-tool email-spoofing microsoft-365 dmarc-bypass ghost-sender spf-bypass dkim-bypass
-
Updated
Jun 10, 2026 - Python