diff --git a/README.md b/README.md index 8b58e61..632b30d 100644 --- a/README.md +++ b/README.md @@ -20,10 +20,18 @@ A command-line tool written in Go that checks domains for email spoofing vulnera ## Installation -Assuming you have Go installed, you can build the program with: +You can install this tool using Go: ```bash -go build spoof_check.go +go install github.com/taygun/spoof_checker@latest +``` + +Or clone the repository and install locally: + +```bash +git clone https://github.com/taygun/spoof_checker.git +cd spoof_checker +go build main.go -o spoof_check ``` ## Usage @@ -128,7 +136,9 @@ DMARC Record: v=DMARC1; p=none; rua=mailto:dmarc@example.com Found the following issues: -Code 4: SPF "~all" (SoftFail) mechanism set +Code 4: SPF "~all" (SoftFail) ```bash + +```echanism set Severity: Medium Detail: The "all" mechanism at the end of the end of an SPF record tells receivers how to treat unauthorised (i.e. spoofed) emails - the "~all" setting tells receivers to 'SoftFail' (i.e. quarantine) emails that fail SPF authentication. In practice however, many email filters only slightly raise the total spam score and accept 'SoftFailed' (i.e. spoofed) emails. diff --git a/go.mod b/go.mod new file mode 100644 index 0000000..aa76aad --- /dev/null +++ b/go.mod @@ -0,0 +1,3 @@ +module github.com/taygun/spoof_checker + +go 1.21 diff --git a/spoof_check.go b/main.go similarity index 100% rename from spoof_check.go rename to main.go