GoSurp is a cli tool to work on email and DNS usurpation. It is written in Go and is distributed as a single binary without any external dependencies.

How • Install • Documentation •

How to use

gosurp -h

This will display help for the tool. Here are all the switches it supports.

Inspect DNS Record

First of all, Gosurp allow you to inpect DNS records.

gosurp inspect domain <yourdomain.com>

You can also look for specific DNS records using:

gosurp inspect (spf/dkim/dmarc) <yourdomain.com>

Email usurpation

First of all, to allow you working on building the good mail without sending it, you can use the following command to start a local SMTP server that will print the mail content in the console like a debugger.

gosurp smtp listen -vvv
# or
gosurp smtp listen --hostname localhost --port 2525 -vvv

Then, you can use the following command to send a mail using the local SMTP server.

gosurp smtp send -vvv --from attacker@fsociety.local --to victim@localhost --port 2525

You can find some complete recipes in the documentation.

Install

If you have a Go environment ready to go (at least go 1.19), it's as easy as:

go install github.com/LeoFVO/gosurp@latest

PS: You need at least go 1.19 to compile gosurp.

Docker

```bash docker pull ghcr.io/leofvo/gosurp:latest docker run gosurp:latest ```

Binary Releases

We are now shipping binaries for each of the releases so that you don't even have to build them yourself! How wonderful is that!

If you're stupid enough to trust binaries that I've put together, you can download them from the releases page.

Build from source

Prerequisites

Since this tool is written in Go you need to install the Go language/compiler/etc. Full details of installation and set up can be found on the Go language website. Once installed you have two options. You need at least go 1.19 to compile gosurp.

Clone the repository

git clone git@github.com:LeoFVO/gosurp.git

Compiling

gosurp has external dependencies, and so they need to be pulled in first:

go get && go build

This will create a gosurp binary for you. If you want to install it in the $GOPATH/bin folder you can run:

go install

Setup

Documentation

The documentation is available at https://leofvo.github.io/gosurp/.

In order to deploy documentation for your project, you need to allow github actions to deploy github pages. To do so, go to your repository settings > Pages, and in the Build and deployment section, select Github Actions as the source.

License

gosurp is distributed under MIT License