[HTB-OSINT] EASY PHISH CHALLENGE-WALKTHROUGH.



Description:

Customers of secure-startup.com have been recieving some very convincing phishing emails, can you figure out why?

The Description points towards email-validation, so I tried Quering SPF,DMARC records.
[Note: if you do not have any idea about Email authentication protocols then click here.]

Wakthrough:

Step1:Quering SPF records.



 the result shows the first part of the flag.

Step2: For 2nd part, Quering DMARC records.


 combine both the parts to get the flag.

Comments