Email Spoofing and Domain Impersonation Through Cloud Services

Learn how to exploit email security vulnerabilities in this DEF CON 31 conference talk that reveals techniques for spoofing emails from over 2 million domains while bypassing SPF and DMARC protections. Dive into the mechanics of edge serverless applications and explore how to abuse a partnership between Cloudflare and a major transactional email service provider. Discover practical code examples and access a newly released tool for domain email impersonation, while gaining insights into the fragile infrastructure of modern email security systems. Perfect for red team operators and security professionals looking to understand and demonstrate email spoofing vulnerabilities.