HexBrain

Localize · Report #12836

missing sender policy framework (SPF)

Validstatus
4upvotes
9 Aug 2014disclosed

How it was found

A Valid TXT Record was not found in localize.im This can spoof your email address.

Proof of Concept: http://mxtoolbox.com/SuperTool.aspx?action=spf:localize.im&run=toolpage

related article: Missing SPF for hackerone.com

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original