跳到主要内容
MailFail

MailFail EN

Hacks and Hops · Firefox

MailFail identifies and provides commands to exploit a large number of email-related misconfigurations for the current domain and subdomain. The extension's UI popup highlights any misconfigurations in red and links to supporting documentation.

5.0/5 2 人评分 110用户 v1.0.21当前版本

截图

  • MailFail 截图
  • MailFail 截图
  • MailFail 截图
  • MailFail 截图

简介

Code
This addon is free and open-source software (FOSS) all code can be found here: https://github.com/ACK-J/MailFail
Please report your bugs or feature requests in a GitHub issue instead of in a review.

Test if it works!
https://www.blackhillsinfosec.com/mailfail/

This addon checks misconfigurations with the following protocols:
* SPF
* DMARC
* DKIM
* ARC
* BIMI
* MX
* MTA-STS
* DANE
* DNSSEC
* SMTP TLS Reporting
* ADSP
* Mail Channels
* NSEC
* NSEC3
* SRV
* Click HERE to read the specifics.

Why I wrote this addon?
While researching email security for a few months I realized that there was a lot of nuance in how different email security protocols worked. It was very confusing at times and I wanted to organize all the different edge cases into a single tool that could help others identify these misconfigurations without having to read through dozens of RFCs. This extension was supposed to be 100 lines of code written in an afternoon, instead it has reached almost 2,000 lines of code over multiple months.

Donations

  • Monero Address: 89jYJvX3CaFNv1T6mhg69wK5dMQJSF3aG2AYRNU1ZSo6WbccGtJN7TNMAf39vrmKNR6zXUKxJVABggR4a8cZDGST11Q4yS8

Permissions Needed

Display notifications to you
* This is needed so the addon can alert you when a severe misconfiguration is discovered.
Access browser tabs
* This is needed so the addon can display the proper number of misconfigurations on a per-tab basis.

Privacy Warning

  • This extension does not use your computers default DNS and instead uses CloudFlare's 1.1.1.1 over DoH. It also uses duckduckgo's icon API to privately retrieve websites favicon images.

MailFail 是做什么的

MailFail 是一款面向 Firefox 的开发者工具类扩展,主要用来调试页面、查看样式与请求、测试接口、辅助前端开发。官方对它的介绍是:MailFail identifies and provides commands to exploit a large number of email-related misconfigurations for the current domain and subdomain. The extension's UI popup highlights any misconfigurations in red and links to supporting documentation.在Firefox 附加组件商店(AMO)上,它当前版本 1.0.21,评分 5(2 人评价),约 110 名用户。

适合什么人用

从功能定位看,MailFail 更适合前端工程师、测试与需要经常查看页面结构的用户。如果你平时只是偶尔遇到相关需求,用浏览器自带功能也能凑合;但如果这件事每天都发生,装一个专门处理它的扩展通常比手动操作省事得多。

怎么安装 MailFail

  1. 打开Firefox 附加组件商店(AMO)上的官方页面;
  2. 点「添加到浏览器」并确认权限提示;
  3. 装好后在扩展列表里固定图标,方便随时开关。

本站只做索引与介绍,安装包来自官方商店。如果商店页面提示当前地区不可用,说明该扩展未在你所在区域上架。

常见问题

MailFail 是免费的吗?

MailFail 在Firefox 附加组件商店(AMO)免费提供下载。它是浏览器扩展,装上就能直接用,不需要注册账号。

MailFail 安全吗?

它只申请了 0 项权限,范围比较克制,没有申请「读取所有网站数据」这种大权限。

MailFail 支持哪些浏览器?

当前收录的版本来自Firefox 附加组件商店(AMO),适用于 Firefox。同一个扩展在其他商店可能有对应版本,但功能与版本号不一定相同。

怎么卸载 MailFail?

在扩展管理页找到 MailFail,点移除即可。它在本地保存的设置会一起清掉,不会残留数据。

权限清单 来自 manifest.json 原文

接口权限 3

  • notifications
  • storage
  • tabs