DKIM Collection/Analysis

[Zamanry]

Love the tool! Have we considered adding DKIM support as well? There is research out there on bypassing DKIM requirements and it would be nice to have a single tool to identify and evaluate the DKIM record? My previous coworker had wrote some code here on how guessing common DKIM subdomains that may be helpful:

• https://github.com/Nakul08/MailRecords

Some example of DKIM attacks:

• https://i.blackhat.com/USA-20/Thursday/us-20-Chen-You-Have-No-Idea-Who-Sent-That-Email-18-Attacks-On-Email-Sender-Authentication.pdf
• https://halon.io/blog/the-dkim-replay-attack-and-how-to-mitigate