MailCatcher runs a super simple SMTP server

I wonder what penetration testing would show in it. When there is web and rewrite to display there is a lot to do in terms of security

It's a tool for catching emails sent from a local app under development. The developer sending those mails already has local access to the machine.

If someone runs it exposed to the public internet... Oh wow, that could be interesting.