Government Security
Network Security Resources

Jump to content

Photo

Gmail As A Relay For Spoofed Mail?

- - - - -
  • Please log in to reply
6 replies to this topic

#1 AgentSmithers

AgentSmithers

    Private First Class

  • Members
  • 26 posts

Posted 01 October 2009 - 11:38 PM

Hey Guys, Doing alot of research on spoofed emails and Ive been searching for an hour basicly for a open relay to test sending spoofed email from address.

Does Gmail allow you to do that through telnet once you Authenticate?

anyone have a quote of what they type in telnet to do that?

Thanks!

P.S. whats a good search for google to find Open non-Blacklisted Relays, I assume this would always be a on going search.
Http://ControllingTheInter.Net
My General Computer Forum, From Security To Programming And Back To Troubleshooting.

#2 Sangar66

Sangar66

    Private

  • Members
  • 2 posts

Posted 11 October 2009 - 04:23 PM

ASPMX.L.GOOGLE.COM is gmails smtp server (without authentication, but it will be detected as spam)

#3 AgentSmithers

AgentSmithers

    Private First Class

  • Members
  • 26 posts

Posted 11 October 2009 - 06:03 PM

Thanks! Ill take a look at that, Ive been trying to find one for the life of me but I don't know a good tactic =(
Http://ControllingTheInter.Net
My General Computer Forum, From Security To Programming And Back To Troubleshooting.

#4 Juno

Juno

    Specialist

  • Sergeant Major
  • 142 posts

Posted 07 December 2009 - 05:52 AM

You are correct, looking for open relays is an ongoing search. There are plenty out there, but they're not always easy to find. Most good email servers are closed by default nowadays, or limited to the addresses of the provider's subscribers.

Anyways, spoofing email is a basic technique that's good to know, and should be learned by any aspiring security researcher or related position.

Here's a site that should get you started with relays to use. Personally experience have had good success with the ones in Italy. Your mileage may vary.
http://www.e-eeasy.c...ServerList.aspx

Note, that just because you spoof an email doesn't mean it can't be traced. But that's another story.

I figure you already know the basic SMTP commands - if not, it's good to learn them by heart. There are plenty references on the web for that, though. I won't beat a dead horse unless you ask me to.

Happy Hacking.
-Juno
Hacking The Everyday - My blog blabberings about life, computer security, and everything in-between.
Don't forget to Read the Rules before you post!

#5 AgentSmithers

AgentSmithers

    Private First Class

  • Members
  • 26 posts

Posted 07 December 2009 - 09:20 AM

You are correct, looking for open relays is an ongoing search. There are plenty out there, but they're not always easy to find. Most good email servers are closed by default nowadays, or limited to the addresses of the provider's subscribers.

Anyways, spoofing email is a basic technique that's good to know, and should be learned by any aspiring security researcher or related position.

Here's a site that should get you started with relays to use. Personally experience have had good success with the ones in Italy. Your mileage may vary.
http://www.e-eeasy.c...ServerList.aspx

Note, that just because you spoof an email doesn't mean it can't be traced. But that's another story.

I figure you already know the basic SMTP commands - if not, it's good to learn them by heart. There are plenty references on the web for that, though. I won't beat a dead horse unless you ask me to.

Happy Hacking.
-Juno



Hey Thanks Alot, Yeah I tried with the one above but no Luck, Anyone else wanna give it a shot, Thanks on the other hand juno ima do a good read up.
Http://ControllingTheInter.Net
My General Computer Forum, From Security To Programming And Back To Troubleshooting.

#6 infiltrator

infiltrator

    Staff Sergeant

  • Sergeant Major
  • 421 posts

Posted 29 April 2010 - 02:27 AM

Try setting up your own mail server with http://www.argosoft.com/rootpages/.
I have used it in the past and was often a target for spammers, because of the relay mechanism.
So if you are trying to relay messages, this one will just do the work for you.
You will also need to set up a dynamic dns, so I suggest heading over to dyndns.com and registering yourself with a free account.
If you need any help in setting it up, just PM me.

#7 vulnerable

vulnerable

    Private

  • Members
  • 2 posts

Posted 10 July 2012 - 07:07 AM

What's problem with sendmail?