A specialized Python tool for forensic EML metadata extraction. Parse SPF, DMARC, DKIM, and Source IPs from Gmail, Outlook, Proton, and Zimbra files.
-
Updated
Apr 1, 2026 - Python
A specialized Python tool for forensic EML metadata extraction. Parse SPF, DMARC, DKIM, and Source IPs from Gmail, Outlook, Proton, and Zimbra files.
A local, offline phishing triage tool for SOC and IR analysts. Parses .eml files and generates structured HTML reports.
Privately share HTML, JSX & eml files via password-protected links. Encrypts in the browser before anything leaves your machine. Self-hosted, Docker, publishes to GitHub Pages.
A command-line utility to parse .eml files.
A rule-based phishing detection system that analyzes .eml files for header anomalies, SPF/DKIM/DMARC authentication results, suspicious URLs, attachments, and phishing indicators. Implemented a weighted risk-scoring engine with a web dashboard that generates detailed analysis reports and actionable recommendations.
Python CLI that reads one .eml file and produces one JSON verdict. 46 explainable rules, weights calibrated on seven measured samples, standard library only. Reads the SPF/DKIM/DMARC verdicts already reported by the receiving mail system — it does not verify them. Measured results published in full, including the false negatives..
Add a description, image, and links to the eml-parser topic page so that developers can more easily learn about it.
To associate your repository with the eml-parser topic, visit your repo's landing page and select "manage topics."