Skill UI

A comprehensive guide for executing complex migration strategies to or from Instantly.ai. This includes consolidating multiple cold email workspaces, migrating leads, campaigns, templates, and email accounts (via IMAP/SMTP), and planning zero-downtime cutovers. Use this when re-architecting your entire outreach infrastructure.

This tool executes a comprehensive pre-flight validation checklist for launching cold email campaigns in a production environment. It systematically verifies account health (SMTP/IMAP status, warmup), campaign configuration (tracking, scheduling), and lead list quality to ensure optimal deliverability and smooth deployment.

Performs authorized SMTP penetration testing to discover open relays, user enumeration vectors, authentication weaknesses, and misconfigurations, then documents findings, relay status, and remediation steps.

Automates Smtp2go tasks through the Rube MCP-powered Composio toolkit by enforcing a discovery-first workflow, connection checks, schema-compliant execution, and session reuse so SMTP operations stay reliable.

This tool automates the extraction of embedded configuration details from Agent Tesla Remote Access Trojan (RAT) samples. It is designed to recover crucial exfiltration credentials (SMTP, FTP, Telegram), keylogger settings, and Command and Control (C2) endpoints by analyzing and deobfuscating the .NET assembly structure. Essential for threat intelligence, incident response, and malware reverse engineering.

This guide details how to use GoPhish, an open-source framework, to conduct authorized phishing simulations. You will learn the complete lifecycle, from deploying the tool and configuring SMTP profiles, to creating realistic email templates and cloning secure landing pages. The skill culminates in analyzing campaign results to assess organizational security posture and improve employee resilience against social engineering attacks.

This skill provides a comprehensive automation solution for conducting red team phishing simulations using the Python gophish library. It streamlines the entire campaign lifecycle, including creating sophisticated email templates with tracking pixels, configuring SMTP profiles, importing user groups from CSV, launching targeted attacks, and generating detailed reports on open rates, click-through rates, and credential submission statistics for robust security awareness assessments.

This comprehensive guide provides a detailed methodology for performing security testing on web applications that handle email sending (e.g., contact forms, password resets, newsletters). It focuses on identifying CRLF/SMTP header injection vulnerabilities, guiding users on how to check if attackers can manipulate email headers, inject custom content, or abuse forms for spam relay during a penetration test.

Himalaya is a terminal-based email client that handles IMAP/SMTP accounts, letting you list, read, search, compose, and organize mail with templates, MML, and scripted attachment flows from one CLI.

This expert playbook covers advanced techniques for email header injection and authentication bypass. It details exploiting CRLF vulnerabilities in SMTP headers (e.g., BCC/CC injection, body control) and bypassing modern email security standards like SPF, DKIM, and DMARC. Essential for penetration testing of contact forms, email APIs, and password reset workflows.

This guide details how to configure SMTP settings for email delivery within a Webiny project. By adding the `<Api.Mailer.Smtp />` component to your `webiny.config.tsx`, you can programmatically set the host, port, and credentials for email services. It emphasizes using environment variables for secure password handling and running the build command after any configuration changes.

This comprehensive guide details how to configure, integrate, and troubleshoot live email sending using Mailtrap. It covers two primary methods: the Email API (REST) and SMTP. Learn the differences between core email streams—transactional (app-generated notifications), bulk (promotional marketing), and batch requests (high-volume efficiency)—along with recommended integration patterns and specific technical endpoints.