Git/mgeeky-Penetration-Testing-Tools
1
0
Fork 0
mirror of https://github.com/mgeeky/Penetration-Testing-Tools.git synced 2024-11-24 11:31:36 +01:00
Code Issues Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
Mariusz B. / mgeeky 2021-10-17 19:37:40 +02:00
parent d11d4d1e8c
commit 19952dffa8
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
phishing/decode-spam-headers.py
View File

@ -1783,18 +1783,24 @@ More information:
for (num, header, value) in self.headers: for (num, header, value) in self.headers:
v = SMTPHeadersAnalysis.flattenLine(value) v = SMTPHeadersAnalysis.flattenLine(value)
if '=?us-ascii?Q?' in v: m = re.search(r'\=\?[a-z0-9\-]+\?Q\?', v, re.I)
if m:
num0 += 1 num0 += 1
value_decoded = emailheader.decode_header(value)[0][0].decode() value_decoded = emailheader.decode_header(value)[0][0].decode()
hhh = self.logger.colored(header, 'magenta') hhh = self.logger.colored(header, 'magenta')
tmp += f'\t({num0:02}) Header: {hhh}\n' tmp += f'\t({num0:02}) Header: {hhh}\n'
tmp += f'\t Value:\n\n' tmp += f'\t Value:\n\n'
tmp += value_decoded + '\n\n' tmp += value_decoded + '\n\n'
tmp += f'\t Base64 decoded Hexdump:\n\n' try:
tmp += SMTPHeadersAnalysis.hexdump(base64.b64decode(value_decoded)) x = SMTPHeadersAnalysis.hexdump(base64.b64decode(value_decoded.encode()))
tmp += '\n\n\n' tmp += f'\t Base64 decoded Hexdump:\n\n'
tmp += x
tmp += '\n\n\n'
except:
pass
shown.add(header) shown.add(header)