(forged) Email Relay

Hi, I'm messing around with email spoofing. I want to send my friend stuff "from the fbi."

I can telnet into servers but I can't send to any address except on that server. My isp is bellsouth, so I can send myself or other bellsouth subscribers stuff from ****@bellsouth.net to ****@bellsouth.net, but I can't relay to other users like ****@yahoo.com. (I know yahoo uses POP, not SMTP, so maybe that's the problem there…?)

Does anyone know a domain I can use to relay smtp mail to other domains? I want to be able to send from anyone to anyone… any help please?

Thanks in advance!

;)

–they're watching you…–

ThorsDecree wrote: Hi, I'm messing around with email spoofing. I want to send my friend stuff "from the fbi."

I can telnet into servers but I can't send to any address except on that server. My isp is bellsouth, so I can send myself or other bellsouth subscribers stuff from ****@bellsouth.net to ****@bellsouth.net, but I can't relay to other users like ****@yahoo.com. (I know yahoo uses POP, not SMTP, so maybe that's the problem there…?)

Does anyone know a domain I can use to relay smtp mail to other domains? I want to be able to send from anyone to anyone… any help please?

Thanks in advance!

;)

–they're watching you…–

Go to command prompt

Type nslookup press enter

Type set q=mx press enter

then type server name ie gmail.com and press enter

The MX preference = 50 are the servers you're looking for, so example let's take gmail, their mail servers would be:

gsmtp163.google.com gsmtp183.google.com

Then you telnet to them on SMTP, and if you don't know what to do from there look up how to spoof an email.

sorry i haven't replied in a while, probs with Window$ on my end :\

i can't telnet into gmail, it uses pop3. How can i telnet into a pop port/ what do I have to do to use it? smtp is ok but almost no one uses it… All I need to do is send an email from ****@something.com to ****@somethingelse.com

what do I do now?

[edit] the only open port is 110, pop. 25(smtp) is not open on either server [/edit]

ThorsDecree wrote: sorry i haven't replied in a while, probs with Window$ on my end :\

i can't telnet into gmail, it uses pop3. How can i telnet into a pop port/ what do I have to do to use it? smtp is ok but almost no one uses it… All I need to do is send an email from ****@something.com to ****@somethingelse.com

what do I do now?

[edit] the only open port is 110, pop. 25(smtp) is not open on either server [/edit]

In command prompt, type telnet gsmtp183.google.com 25

Then do the email spoof.

Heres a detailed tutorial:

edit: actually:

http://www.hellboundhackers.org/articles/93-Simple-email-spoofing-with-telnet.html

there's an email spoofer/bomber on http://blackdash.com/ and i think romeo put one on DMZ, you'll have to look on there though.

end3r wrote: there's an email spoofer/bomber on http://blackdash.com/ and i think romeo put one on DMZ, you'll have to look on there though.

Yeah but it's always helpful to know how it works.

port 25 is not open. only 110

ThorsDecree wrote: port 25 is not open. only 110

Well then you're clearly telneting to the wrong port, because it works perfect for me. Telnet to port 25 on this server: gsmtp183.google.com

…telnet is port 23

end3r wrote: …telnet is port 23

I'm referring to the telnet command, not port. :p

i know what i'm doing. I cannot telnet to that server on port 25, it is NOT OPEN

"telnet gsmtp183.google.com 25"

after that it tries to connect then fails.

I ran a port scan, 25 IS NOT OPEN

ThorsDecree wrote: i know what i'm doing. I cannot telnet to that server on port 25, it is NOT OPEN

"telnet gsmtp183.google.com 25"

after that it tries to connect then fails.

I ran a port scan, 25 IS NOT OPEN

Weird, I just copied and pasted ur: telnet gsmtp183.google.com 25 and it connected me, and then I spoofed an email. So, idk.

C:\>nmap -P0 -sT -vv -O gsmtp183.google.com

Starting Nmap 4.11 ( http://www.insecure.org/nmap ) at 2007-06-19 21:43 Eastern Daylight Time DNS resolution of 1 IPs took 0.06s. Initiating Connect() Scan against nf-in-f27.google.com (64.233.183.27) [1680 por ts] at 21:43 Discovered open port 25/tcp on 64.233.183.27

well hey, i copied/pasted that and tried, and it still won't work… lol idk what's up with that.

ThorsDecree wrote: well hey, i copied/pasted that and tried, and it still won't work… lol idk what's up with that.

Do what you've been doing, and once it doesn't connect or w/e, right click, click mark, copy it all and then paste it here.

some isp's will block your outgoing traffic on 25.

happened to a mate

richohealey wrote: some isp's will block your outgoing traffic on 25.

happened to a mate

It won't cause any outgoing traffic on your part, it would be equivalent to going to gmail and sending an email, you're connecting to a host to do outgoing traffic on SMTP, not you. But hey, that's as best an explanation I've heard :right:

still i cant get on taht server… how can i forge email in pop? i can't telnet into 110 and get anything, and i can't find anything about the subject

ThorsDecree wrote: still i cant get on taht server… how can i forge email in pop? i can't telnet into 110 and get anything, and i can't find anything about the subject

You can't spoof an email using pop, it must be SMTP.

ok how can i send from one domain to another? al the ones i'vfe tried only allow sending to ****@theirdomain.ext

and with my isp i can ony send from my isp to my isp… i've tried others and the sender can be anyone, but i must send to their domain. how can i get aroudn this? anyone knwo a server that allows this?

Ermm, I can't think of anyway to do this. But if you wanted to, it's also possible in PHP. I know it's not a solution to your exact problem, but you can forge e-mail VERY easily with a PHP script.

ThorsDecree wrote: ok how can i send from one domain to another? al the ones i'vfe tried only allow sending to ****@theirdomain.ext

and with my isp i can ony send from my isp to my isp… i've tried others and the sender can be anyone, but i must send to their domain. how can i get aroudn this? anyone knwo a server that allows this?

You could use Putty, with a proxy.

I have putty, now what exactly do i do?

ThorsDecree wrote: I have putty, now what exactly do i do?

Find a proxy. I like Only_Samurai's proxy site, it's pretty pimp:

http://proxyelite.net/

Then in your configuration window, go down to proxy and configure it according to the proxy you're using.

and that will allow me to…?

ThorsDecree wrote: and that will allow me to…?

Bleh, damnit do some research :@ But, what it does is it connects you to a host, which then allows you to connect to another host through it. Basic proxy concepts. The proxy won't block any traffic to port 25, if that is ur problem. I donno just download net tools and use their email spoofer if u cant' get it. idk :right:

no i understand proxies, i use them a lot, i'm wondering how i can actually telnet into a mailserver and write email there

1. from whomever i wish

2. to whomever

with any domain name i choose. for the email sender/rcpt

read my original post, it talks about what's happening. I don't want to use toosl, just cmd :p

ThorsDecree wrote: no i understand proxies, i use them a lot, i'm wondering how i can actually telnet into a mailserver and write email there

1. from whomever i wish

2. to whomever

with any domain name i choose. for the email sender/rcpt

read my original post, it talks about what's happening. I don't want to use toosl, just cmd :p

Yes it's very possible. In fact, it's very easy.

so what do i do? im stuck with limits on my rcpt to: and sometimes my sender in smtp

anybody out ther know how i can get full access to sender and rcpt when i telnet into an smtp mailserver? so far i can either get any sender i want but restricted rcpt, or i can (with my own isp) only get from: ****@myisp.ext to ****@myisp.ext

any help much appreciated, i want to do this in cmd with telnet, no tools required!

going to bed, its midnight here, please post if you come up with anything!

In reference to the Gmail part of things, I have set it up as Thunderbird's SMTP server and the port I used was 587 (uses TLS btw, so straight telnet wont do it)

Hope that helps/enlightens someone.