DEF CON 31 Spam Channel Spoofing Emails From 2 M+ Domains Virtually Becoming Satan byt3bl33d3r

Ever wake up and ask yourself: Damn, how could I make email security suck even more today Tired of your Red Teams phishing emails not landing in your targets inbox Do you dislike Boston (the city) and love Satan If you answered yes to any of those questions you should come to this talk I ll be showing you how to spoof emails from 2 million+ domains (while also bypassing SPF DMARC ) by (ab)using a partnership between Cloudflare and the biggest transactional email service on the interwebs. We ll be diving into edge serverless applications and the magical world of email security where everything is (still) held up by duct tape, pasta, and marinara sauce. Finally, Ill be dropping code and releasing a tool that demonstrates how to impersonate emails from 2million+ domains.