The Lupaxa Security Toolbox
Part of The Lupaxa Project
lupaxa-mx-inspector
Look up a domain's MX hosts, SPF, and DMARC policy from public DNS, with an optional SMTP banner probe.
[!WARNING] Authorised use only.
--probeopens an SMTP session to the target MX hosts. Use it only on systems you are allowed to test.
Features
- Query
MXrecords (priority and host) - Query apex
TXTfor SPF (v=spf1) - Query
_dmarc.<domain>for the published TXT record - Decode common DMARC tags (
p,sp,rua,ruf, alignment, and more) - Score DNS-only spoofing posture (
open/monitoring/enforcing/locked down) - Optional
--probeSMTP banner / EHLO fingerprint (no authentication, no mail) - Human-readable table (colour on a TTY;
--no-colororNO_COLORto disable), or JSON - Library API (
lookup_dmarc/lookup_mx/lookup_spf/score_posture/probe_smtp) and CLI (mx-inspector) - Fully typed, linted, formatted, and tested
Installation
From PyPI
pip install lupaxa-mx-inspector
From source (development mode)
pip install -e ".[dev]"
Requires Python 3.10+. Runtime dependencies: dnspython, prettytable,
colored.
Library quick start
from lupaxa.mx_inspector import lookup_dmarc, lookup_mx, lookup_spf, score_posture
policy = lookup_dmarc("example.com")
hosts = lookup_mx("example.com")
spf = lookup_spf("example.com")
score = score_posture(policy, mx_hosts=hosts, spf_records=spf)
print(policy["p"], score.value, score.grade)
CLI quick start
mx-inspector --help
mx-inspector example.com
mx-inspector example.com example.org
mx-inspector example.com --format json
mx-inspector example.com --no-color
mx-inspector example.com --probe --port 587
You can also run the CLI as a module:
python -m lupaxa.mx_inspector --help
python -m lupaxa.mx_inspector --version
Documentation
Online documentation:
Source repository:
Serve docs locally
From a clone of the repository:
make mkdocs-serve
Then open the local URL printed by MkDocs in your browser.
Development
Clone the repository and install with Make:
make init # first-time makefile-skills checkout
make python-install-dev # editable install with [dev]
make python-check # lint, type-check, and test
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file lupaxa_mx_inspector-0.2.0.tar.gz.
File metadata
- Download URL: lupaxa_mx_inspector-0.2.0.tar.gz
- Upload date:
- Size: 14.5 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
bd4074244fa938ebc2631dd3afb8a542fff2df515632b8d521d14209cd2ad599
|
|
| MD5 |
d2cb68b23378860d9e3b9ee1974edb8f
|
|
| BLAKE2b-256 |
b336906731f7d752e61dd854b5053d6e716553a20a1ac35d0e36b18d71953975
|
Provenance
The following attestation bundles were made for lupaxa_mx_inspector-0.2.0.tar.gz:
Publisher:
generate-release.yml on lupaxa-security-toolbox/mx-inspector
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
lupaxa_mx_inspector-0.2.0.tar.gz -
Subject digest:
bd4074244fa938ebc2631dd3afb8a542fff2df515632b8d521d14209cd2ad599 - Sigstore transparency entry: 2767862085
- Sigstore integration time:
-
Permalink:
lupaxa-security-toolbox/mx-inspector@ea261039f44c2d1f95bd5ceb83ae042e42eb27b6 -
Branch / Tag:
refs/tags/v0.2.0 - Owner: https://github.com/lupaxa-security-toolbox
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
generate-release.yml@ea261039f44c2d1f95bd5ceb83ae042e42eb27b6 -
Trigger Event:
push
-
Statement type:
File details
Details for the file lupaxa_mx_inspector-0.2.0-py3-none-any.whl.
File metadata
- Download URL: lupaxa_mx_inspector-0.2.0-py3-none-any.whl
- Upload date:
- Size: 18.2 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
187b55f0cd9c6255981900c00cdfd020457df49a1770958696051cc350166d47
|
|
| MD5 |
71076dd01c5b5ada9fb89071bf9ad509
|
|
| BLAKE2b-256 |
b8523d016db77241f944534785b6b495294f85910c4f3d58407dbecfb0ac98c3
|
Provenance
The following attestation bundles were made for lupaxa_mx_inspector-0.2.0-py3-none-any.whl:
Publisher:
generate-release.yml on lupaxa-security-toolbox/mx-inspector
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
lupaxa_mx_inspector-0.2.0-py3-none-any.whl -
Subject digest:
187b55f0cd9c6255981900c00cdfd020457df49a1770958696051cc350166d47 - Sigstore transparency entry: 2767862115
- Sigstore integration time:
-
Permalink:
lupaxa-security-toolbox/mx-inspector@ea261039f44c2d1f95bd5ceb83ae042e42eb27b6 -
Branch / Tag:
refs/tags/v0.2.0 - Owner: https://github.com/lupaxa-security-toolbox
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
generate-release.yml@ea261039f44c2d1f95bd5ceb83ae042e42eb27b6 -
Trigger Event:
push
-
Statement type: