PDA

View Full Version : Email Spoof?



Moonbat
09-20-2006, 09:20 PM
Are there any email servers I can connect to to spoof emails? Because I found out about it today, and wanted to try it out. 'Cept the fact that when I tried hotmail. it gave me a warning and my connection timed out, and when it didn't, I never recieved my message. I've tried connecting to mail.yahoo and mail.google, except I can't either.

Is there a way to connect to either of these. And if there isn't, is there another server I can use?

Ezekiel
09-21-2006, 11:35 AM
Are there any email servers I can connect to to spoof emails? Because I found out about it today, and wanted to try it out. 'Cept the fact that when I tried hotmail. it gave me a warning and my connection timed out, and when it didn't, I never recieved my message. I've tried connecting to mail.yahoo and mail.google, except I can't either.

Is there a way to connect to either of these. And if there isn't, is there another server I can use?

Any SMTP server allows you to spoof emails. There are no specific servers you need to connect to - all will allow you to input any 'from' address without authentication. Here's how to find the mail server of a domain:


nslookup -querytype=mx domain.com

Remember to input domain.com, not www.domain.com.

To spoof an email, you need to connect to the server of the target address, not your own service. If I wanted to spoof an email to abc@hotmail.com, I would do this:


telnet mx*.hotmail.com 25

helo hotmail.com

mail from: test@fakedomain.com

rcpt to: target_email_address@hotmail.com

data

From: test@fakedomain.com
To: target_email_address@hotmail.com
Subject: Testing my email spoofing skills.

This is my spoofed email.

.

quit

It's important to remember the period (.) after the message. This tells the server where the end of the text is.

Moonbat
09-21-2006, 06:11 PM
Wait, it has to be a mail server right?

Couldn't I just get someone's IP who has port 25 open and go from there?

Ezekiel
09-22-2006, 10:54 AM
Wait, it has to be a mail server right?

Couldn't I just get someone's IP who has port 25 open and go from there?

It has to be a mail server.

You can't just randomly connect to somebody with port 25 'open' and expect to send emails from there. What will handle the connection? There has to be a server program running on a specific port for you to get a response.

Try reading these to understand how ports and server programs operate:

http://en.wikipedia.org/wiki/TCP_and_UDP_port
http://en.wikipedia.org/wiki/Port_forwarding

Moonbat
09-22-2006, 04:43 PM
:) Thanks mike.:)

rorshach
05-01-2007, 03:31 PM
I tried this out, and every time I tried to open a connection I got the message that it could not open a connection to the host on port 25. I'm sure I typed it in correctly though.

Ezekiel
05-01-2007, 04:25 PM
I tried this out, and every time I tried to open a connection I got the message that it could not open a connection to the host on port 25. I'm sure I typed it in correctly though.

Are you connecting to a host that is running a mail server on port 25 and is fully accessible to the Internet without firewalls interfering?

rorshach
05-01-2007, 05:47 PM
I know it's not the firewall interfering, so i guess im using the wrong the port, I just assumed that it was always port 25. How do you find out what port to use?

Ezekiel
05-01-2007, 05:56 PM
Are you connecting to a host that is running a mail server?

rorshach
05-01-2007, 10:46 PM
I'll be honest, I really don't know what I'm doing. I'm on a school network at a college, so now that I think of it, there could be a firewall that I'm not aware. Sorry that I'm not really giving you much to work with.

Ezekiel
05-02-2007, 11:36 AM
I'll be honest, I really don't know what I'm doing. I'm on a school network at a college, so now that I think of it, there could be a firewall that I'm not aware. Sorry that I'm not really giving you much to work with.

If you're not connecting to a computer that's running mail server software, you'll get that "Could not establish connection" message. You can't connect to an IP address on a specific port without their computer both running a server and being accessible.