Skill UI

A comprehensive guide for executing complex migration strategies to or from Instantly.ai. This includes consolidating multiple cold email workspaces, migrating leads, campaigns, templates, and email accounts (via IMAP/SMTP), and planning zero-downtime cutovers. Use this when re-architecting your entire outreach infrastructure.

This tool executes a comprehensive pre-flight validation checklist for launching cold email campaigns in a production environment. It systematically verifies account health (SMTP/IMAP status, warmup), campaign configuration (tracking, scheduling), and lead list quality to ensure optimal deliverability and smooth deployment.

Performs authorized SMTP penetration testing to discover open relays, user enumeration vectors, authentication weaknesses, and misconfigurations, then documents findings, relay status, and remediation steps.

Automates Smtp2go tasks through the Rube MCP-powered Composio toolkit by enforcing a discovery-first workflow, connection checks, schema-compliant execution, and session reuse so SMTP operations stay reliable.

This script is designed for malware analysis, specifically targeting .NET-based Remote Access Trojans (RATs) like Agent Tesla. It automatically extracts embedded and obfuscated configuration data, including SMTP credentials, FTP endpoints, Telegram tokens, and C2 webhooks. It utilizes advanced techniques such as regex pattern matching, Base64 decoding, and simulating XOR/SHA256 decryption to reveal critical threat intelligence for security research.

This guide details how to use GoPhish, an open-source framework, to conduct authorized phishing simulations. You will learn the complete lifecycle, from deploying the tool and configuring SMTP profiles, to creating realistic email templates and cloning secure landing pages. The skill culminates in analyzing campaign results to assess organizational security posture and improve employee resilience against social engineering attacks.

This skill provides a comprehensive automation solution for conducting red team phishing simulations using the Python gophish library. It streamlines the entire campaign lifecycle, including creating sophisticated email templates with tracking pixels, configuring SMTP profiles, importing user groups from CSV, launching targeted attacks, and generating detailed reports on open rates, click-through rates, and credential submission statistics for robust security awareness assessments.

Provides a comprehensive methodology for testing web applications susceptible to email header injection, SMTP injection, and CRLF attacks. This skill guides users in identifying vulnerable inputs (e.g., contact forms, subject lines) that allow unauthorized modification of email headers (Cc, Bcc, From) or abuse the system for spam relaying.

Himalaya is a terminal-based email client that handles IMAP/SMTP accounts, letting you list, read, search, compose, and organize mail with templates, MML, and scripted attachment flows from one CLI.

This expert playbook covers advanced techniques for email header injection and authentication bypass. It details exploiting CRLF vulnerabilities in SMTP headers (e.g., BCC/CC injection, body control) and bypassing modern email security standards like SPF, DKIM, and DMARC. Essential for penetration testing of contact forms, email APIs, and password reset workflows.

This guide details how to configure SMTP email delivery settings within a Webiny project using the `<Api.Mailer.Smtp />` component. It specifies the required properties (host, port, user, etc.) and emphasizes best practices, such as passing sensitive passwords via environment variables rather than hard-coding them. Ideal for developers setting up external email services.

This comprehensive guide details how to configure, integrate, and troubleshoot live email sending using Mailtrap. It covers two primary methods: the Email API (REST) and SMTP. Learn the differences between core email streams—transactional (app-generated notifications), bulk (promotional marketing), and batch requests (high-volume efficiency)—along with recommended integration patterns and specific technical endpoints.