Darksat IT Security Forums
October 19, 2019, 06:44:56 pm
Welcome, Guest. Please login or register.

Login with username, password and session length
News: Darksat IT Security Forum
From Firewall Support, AntiVirus Questions, Spyware problems, Linux and Windows Security, Black Hat SEO right down to Website Design and Multimedia
 
  Home Help Search Gallery Links Staff List Login Register  

e-mail spoofing


Pages: [1]
  Print  
Author Topic: e-mail spoofing  (Read 2693 times)
Defcon 5
Master
*****
Posts: 2410



View Profile WWW
« on: November 16, 2007, 10:48:29 am »

Are e-mails traceable?
Cant help but think if a email is sent from one computer to another it is possible to detect what computer has sent it?
Report Spam   Logged

celebrity exposed
Expert
****
Posts: 136



View Profile WWW
« Reply #1 on: November 16, 2007, 11:06:23 am »

you can find out the respectiv ip.and after that you take a research .whois
Report Spam   Logged
nuk
31337
***
Posts: 48


View Profile WWW
« Reply #2 on: November 16, 2007, 01:10:53 pm »

usually the one's ip you want to find out is behind a proxy!  Cheesy
Report Spam   Logged
Defcon 5
Master
*****
Posts: 2410



View Profile WWW
« Reply #3 on: November 16, 2007, 01:44:49 pm »

How do you get a ip from someone thats sent a email?
Report Spam   Logged
nuk
31337
***
Posts: 48


View Profile WWW
« Reply #4 on: November 16, 2007, 01:49:17 pm »

check the header of the email!
Report Spam   Logged
Darksat
Administrator
Master
*******
Posts: 3303



View Profile WWW
« Reply #5 on: November 16, 2007, 03:03:17 pm »

Yeah, Like Nuk Said, check the header info.
It normally has routing info as well but you can normally find the originating IP fairly easily.
Where to find header info normally depends on the mail client you are using.

Or if you fancy doing it the other way around.
You can even get someones IP if they open an email you sent if you have a hotlinked unique image in a HTML email.
And you can normally pull a lot more info through log tracking that way.


This isnt really email spoofing though, email spoofing is sending an email and making it appear to come from another email address.
eg sending an email with a spoofer and make it appear to come from bill@microsoft.com
« Last Edit: November 16, 2007, 03:05:10 pm by Darksat » Report Spam   Logged
Defcon 5
Master
*****
Posts: 2410



View Profile WWW
« Reply #6 on: November 16, 2007, 03:20:00 pm »

Oh yeah, I meant this to be another topic, but then wondered about tracking the ip.

okay getting back on course, using email spoofing can you send a attachment?
Report Spam   Logged
Darksat
Administrator
Master
*******
Posts: 3303



View Profile WWW
« Reply #7 on: November 16, 2007, 03:53:46 pm »

Yeah Sure if you are using a decent mail server.
Most spoofers have the ability to send attachments, if you are using something like a hacked contact form some of them wont take attachments, but even most of them will.
Report Spam   Logged
celebrity exposed
Expert
****
Posts: 136



View Profile WWW
« Reply #8 on: November 17, 2007, 05:51:22 am »

how can i send a mail so that the person who will receive it to see "from bill@microsoft.com"? :-?? how can i spoof an email?
Report Spam   Logged
Defcon 5
Master
*****
Posts: 2410



View Profile WWW
« Reply #9 on: November 17, 2007, 07:02:58 am »

can use the mail() function on php or just hijack someone elses contact form.
You will find a lot of spoofing email forms on the internet as well.
Report Spam   Logged
Darksat
Administrator
Master
*******
Posts: 3303



View Profile WWW
« Reply #10 on: November 17, 2007, 09:03:44 am »

Neo is right
Modifying someones contact forum is normally the easiest way.
Either find one and modify the input fields, or host your own.
best to do if off a free hosting account if you can.
There are software packages that do the same thing, but you normally have to find a SMTP mail server to use with it anyway.
Report Spam   Logged
Systemerror
N00b
*
Posts: 9



View Profile WWW
« Reply #11 on: January 15, 2008, 06:04:37 am »

Their are many ways to spoof email addys, you'll find that (without having to code a tool of anything) if you look hard enough you can actually find places online that will do it for you by default though... they probably wont know this though, http://readnotify.com/ is a good example and their are many others.

P.S on the whole tracking an IP from an email addy thing, using a sniffer has to be one of the best methods.
Report Spam   Logged

Pages: [1]
  Print  
 
Jump to:  

Powered by EzPortal
eXTReMe Tracker
Security Forum
Bookmark this site! | Upgrade This Forum
SMF For Free - Create your own Forum


Powered by SMF | SMF © 2016, Simple Machines
Privacy Policy
Page created in 0.047 seconds with 14 queries.