6 replies to this topic

[AgentSmithers]

Hey Guys, Doing alot of research on spoofed emails and Ive been searching for an hour basicly for a open relay to test sending spoofed email from address.

Does Gmail allow you to do that through telnet once you Authenticate?

anyone have a quote of what they type in telnet to do that?

Thanks!

P.S. whats a good search for google to find Open non-Blacklisted Relays, I assume this would always be a on going search.

[Sangar66]

ASPMX.L.GOOGLE.COM is gmails smtp server (without authentication, but it will be detected as spam)

[AgentSmithers]

Thanks! Ill take a look at that, Ive been trying to find one for the life of me but I don't know a good tactic =(

[Juno]

You are correct, looking for open relays is an ongoing search. There are plenty out there, but they're not always easy to find. Most good email servers are closed by default nowadays, or limited to the addresses of the provider's subscribers.

Anyways, spoofing email is a basic technique that's good to know, and should be learned by any aspiring security researcher or related position.

Here's a site that should get you started with relays to use. Personally experience have had good success with the ones in Italy. Your mileage may vary.
http://www.e-eeasy.c...ServerList.aspx

Note, that just because you spoof an email doesn't mean it can't be traced. But that's another story.

I figure you already know the basic SMTP commands - if not, it's good to learn them by heart. There are plenty references on the web for that, though. I won't beat a dead horse unless you ask me to.

Happy Hacking.
-Juno

[AgentSmithers]

You are correct, looking for open relays is an ongoing search. There are plenty out there, but they're not always easy to find. Most good email servers are closed by default nowadays, or limited to the addresses of the provider's subscribers.

Anyways, spoofing email is a basic technique that's good to know, and should be learned by any aspiring security researcher or related position.

Here's a site that should get you started with relays to use. Personally experience have had good success with the ones in Italy. Your mileage may vary.
http://www.e-eeasy.c...ServerList.aspx

Note, that just because you spoof an email doesn't mean it can't be traced. But that's another story.

I figure you already know the basic SMTP commands - if not, it's good to learn them by heart. There are plenty references on the web for that, though. I won't beat a dead horse unless you ask me to.

Happy Hacking.
-Juno

Hey Thanks Alot, Yeah I tried with the one above but no Luck, Anyone else wanna give it a shot, Thanks on the other hand juno ima do a good read up.

[infiltrator]

Try setting up your own mail server with http://www.argosoft.com/rootpages/.
I have used it in the past and was often a target for spammers, because of the relay mechanism.
So if you are trying to relay messages, this one will just do the work for you.
You will also need to set up a dynamic dns, so I suggest heading over to dyndns.com and registering yourself with a free account.
If you need any help in setting it up, just PM me.

[vulnerable]

What's problem with sendmail?