SecureMailScope
Network-forensics tool that reads email traffic captures and shows whether SMTP, IMAP, or POP3 sessions were actually encrypted.
The Problem
Mail servers can claim to support TLS while sessions still fall back to plaintext. Given a packet capture, there's no quick way to prove whether a specific email session was protected, and if not, where it failed.
What I Built
Built for Smart India Hackathon 2026 (problem statement 26159). It takes an offline PCAP with SMTP, IMAP, or POP3 traffic, reconstructs TCP sessions, identifies protocols by behaviour rather than port, replays the STARTTLS/STLS state machines, and parses every observable TLS handshake and certificate. A versioned YAML policy produces a reproducible cryptographic posture score, with JSON, HTML, and PDF reports.
Tech Stack
All projects- Python
- TypeScript
- SQLite
Python
TypeScript
SQLite