Skip to content
attack.paths
Sign in
← LibraryTechnique entry
EM-SPF-BYPASSInitial Access

SPF Bypass / Misconfig

Permissive SPF (~all / +all) or include: of large permissive ranges lets attackers send mail that passes SPF from an attacker-controlled IP.

§ Where this technique fits

EM-SPF-BYPASS is catalogued under the Initial Access tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 4 on average.

§ Dossiers chaining this technique

§ What commonly comes next

  1. 01
    Display-Name Spoofing
    EM-DISPLAY-SPOOF · Initial Access
    seen 1×