From 3a609949bfe6c63717342536091058361b6f5b04 Mon Sep 17 00:00:00 2001
From: "Mariusz B. / mgeeky" <mb@binary-offensive.com>
Date: Sun, 17 Oct 2021 19:10:49 +0200
Subject: [PATCH] update

---
 phishing/decode-spam-headers.py | 24 +++++++++++++++++++++++-
 1 file changed, 23 insertions(+), 1 deletion(-)

diff --git a/phishing/decode-spam-headers.py b/phishing/decode-spam-headers.py
index 3128998..54acea1 100644
--- a/phishing/decode-spam-headers.py
+++ b/phishing/decode-spam-headers.py
@@ -9,10 +9,32 @@
 # but also by the Offensive security consultants performing Phishing Awareness Trainings, before sending
 # a campaign to analyse negative constructs in their e-mails.
 #
+# The script can decode many different SPAM related headers, among the others:
+#   - Authentication-Results
+#   - X-Forefront-Antispam-Report
+#   - X-Mailer
+#   - X-Microsoft-Antispam-Mailbox-Delivery
+#   - X-Microsoft-Antispam-Message-Info
+#   - X-Microsoft-Antispam
+#   - X-MS-Exchange-Transport-EndToEndLatency
+#   - X-MS-Oob-TLC-OOBClassifiers
+#   - X-MS-Exchange-AtpMessageProperties
+#   - X-Exchange-Antispam-Report-CFA-Test
+#   - X-Microsoft-Antispam-Report-CFA-Test
+#   - X-MS-Exchange-AtpMessageProperties
+#   - X-Spam-Status
+#   - X-Spam-Level
+#   - X-Spam-Flag
+#   - X-Spam-Report
+#   - ARC-Authentication-Results
+#   - X-MSFBL
+#   - X-Ovh-Spam-Reason
+#   - X-VR-SPAMCAUSE
+#   - X-VR-SPAMSCORE
+#
 # Usage:
 #   ./decode-spam-headers [options] <smtp-headers.txt>
 #
-#
 # Mariusz B. / mgeeky, '21
 # <mb [at] binary-offensive.com>
 #