Printable View
Is there any program or any way that when I send an anonymous e-mail claiming to be someone else like [email protected], that I can have it so when they reply it will send their reply to one of my real e-mail addresses? Any help would be GREATLY appreciated. Thanks guys and girls (if there are any). :)
Hmmm....we wouldn't be trying to do a little social engineering would we (claiming to be 'admin' but having your address)? Tsk. Tsk.
/nebulus
Not for this site, no way..I hope you dont think that. MAYBE for another site :D but I wont go into details, I just want to see if there is a way, and see if the way works, its all about exploration and learning remember? ;)
But then this is also a security site. And from the information you've given, you're not exactly implying good intentions.
It is easy to send anonymous email and can be done with just a few lines of code of about any programming language. Now, it will still show the ip address and the server path taken in the header of the email, but it will show you as [email protected] or whatever as the sender.
You cannot recieve replies to this mail unless you own the domain however. If you could tweak it in such a way, then you would also be giving them information to track it back to you in the email header.
Saying you need such and such prebuilt tool to learn is weak and hard to believe. You won't learn much from someone elses compiled code except that it is possible to build such a tool. If it's all about learning and exploration, take some initiative, use google, and learn how to do it yourself. There is a ton of information out there on doing similar things to what you ask and how criminals may take advantage of it (so you can learn how to stop or at least deal with it).
While I have no problem expaining to people how to secure systems or warning people about how hacks work so that they can protect themsevles from those same attacks, the way you have asked your question and the way that you have replied to it, to me at least, do not indicate to me in any way that you have any interest in protecting yourself from such machinizations but rather are looking for a way to do it to someone else...
I will leave it at this, there are ways to do it and you don't need a 'program' to do it, just knowledge.
/nebulus
We have to remember the slogan of this site "The hakers now the weaknes in youre system, shouldn't you..?". This means we have the responsability of securiing our systems, no mather wath kind of. And to improve a " GOOD AND EFICIENT" solution, we must now how the weaknes work.
This fourm is to learn.....
xDrack
Looking at your roll call you should already know how this works.
But the question is. Should we share..?
And i think that's why we are here.....
We don't just have to talk about good question's and the beautifull of the life, we are here to discuse the problems in our real world. To find out the best solution posible, but if we dont share the knowledge,
Then wath is this site for.?
xDrack.
You guys know you do wrong things with what you know, or else you wouldnt have opened or joined this site, I on the other hand, have never performed anything illegal with what I know, and I dont plan on it. But I also dont understand what the point of this forum is now that you mention me just going to google.. isnt the point of this forum to discuss, to ask questions, to get answers? If thats not the point of the forum? What is?
Is good to now that you are of the good boys, but i don't realy care. And if you came here just to say
>"... You guys know you do wrong things with what you know, or else you wouldnt have opened or joined this site ..."
Then you bether leave, because you came here too, so now you are one of us. As you tilte us "The people that do do wrong things with the knowledge ", "or else you wouldnt have joined here".
Really? And how would you know this? While this might apply to some people on these forums, I am a dedicated security professional (whitehat). Do I play with hacks? You bet, but it is on my own test systems, not against live ones. Do I do penetration attempts? You bet, but I have legal permission to do so and only do so at the request of my clients. Have I ever compromised systems? You bet, but they were my own systems. You want to explain to me how this is wrong? I suggest you think a little before you make such broad generalizations.Quote:
You guys know you do wrong things with what you know
The point of the forums you ask? Indeed the point of these forums is the spread of knowledge, in particular, computer/network security; however, the aim of these forums is to help people and professionals secure their systems against hackers, to prevent the damage and lost time associated with a compromised systems, a point you apparently have repeatidly missed. If you want to learn how to secure your systems and protect yourself from the ever increasing malevelance of the net, you are in the right place...if you are looking for some ub3r 1337 toyz and someone to tell you how to hack into a system, then you are not...
/nebulus
The point of the forum is to help each other. By telling you to go to google to answer your own question you could say I am helping you learn to help yourself (give a man a fish, teach a man to fish).
And as I said before, there is a big difference between asking for help learning how something works, and asking for a PRE BUILT TOOL as you did which would teach you very little.
Implying that everyone here has done something illegal with their knowledge is silly. As I said before, this is supposed to be a legit security site. As in promoting and helping people with computer security. That doesn't mean this is a place where the 1337 meet or that it's for all the kids to learn how to hack their friends.
Now, if you would like help finding resources to learn how this stuff works, or have legit questions on items you are having problems learning, configuring, coding, etc. then ask away.
If you want to continue asking for tools to haxor your friends, you may have more luck and less flaming elsewhere.
XPCorpC: You will find a positive goldmine of information here. There are a lot of talented people with an awful lot of knowledge about a vast array of things good and bad. I can, for one say that I have _never_ used any of my knowledge to do anything that I don't have explicit permission to do..... But then again, I am the Manager of Information Systems for my organization with over 650 workstations/servers/routers/firewalls etc...... so I have a bit of flexibility here...... ;)
If you read through the forums you will find a trend here. When people are new, (see the date under your name in your posts), and they ask questions in the wrong way or without fully explaining their motives in a clear and sensible fashion you will find that the response from those of us with the knowledge you need is a little "cool" to say the least. Either here or on other security sites we have seen them all - the "how do I hack Hotmail" all the way through to some quite sophisticated social engineering in an attempt to gain knowledge for malicious purposes. However if you continue to read you will see that once you have "gained some credibility" here the information positively gushes in order to help you. In some circumstance you will see people say "I have this information, PM me if you want to see it". That is because it is info that, in the wrong hands, may be damaging and needs to be limited to those persons the informer feels he can trust rather than spreading it all over the site for every little skiddie to see. The informer will then PM the info to those people he trusts and not to those he doesn't.
Let me just say that to date your question and your attitude indicate that it may be some time before anyone PM's you anything.........
Just out of curiosity, is my understanding of email wrong, what hes asking can't be done correct? Unless ou controled the fake domain (in which case it wouldn't be fake) you cant get the mail to go to a difrent address, correct? Now if you do controll the domain there is a lot of alising you can do, but thats very difrent.
Just because we have taken the time to educate ourselves or are in the process of said education about computer security does not mean we use that knowledge maliciously. I can not think of a non-malicious use of the answers to the questions you are asking.
There are ways to do it, but it would encompass alot of work.
/nebulus
I am assumeing it would involve some other attack on the system.. the only other thing i ould figure would only work on webmail unless outlook is worse then I thaught.
Couldn't I just change the Return-Path in Phasma3000 to one of my e-mails? And also, when I use Phasma 3000, It says "Socket Error!" everytime.. can someone tell me what the problem is?
This is the log of what happens, and I get a Socket Error...
220 mc8-f7.law1.hotmail.com Microsoft ESMTP MAIL Service, Version: 5.0.2195.5600 ready at Fri, 25 Apr 2003 09:41:47 -0700
>>HELO mx4.hotmail.com
250 mc8-f7.law1.hotmail.com Hello [65.32.101.176]
>>MAIL FROM:<Hotmail>
250 [email protected]....Sender OK
>>RCPT TO:<[email protected]>
250 [email protected]
>>DATA
354 Start mail input; end with <CRLF>.<CRLF>
*** SOCKET ERROR!! ***
Heres some link for ya.
Bunch of anoymous e-mail stuff
http://www.stack.nl/~galactus/remail...dex-cpunk.html
Web based anoymous e-mail
http://anony.co.uk/
you could do that but then it wouldn't be anon would it. it owuld have your return path listed. As for the socket error, I would venture a guess that its bucause hotmail dosn't have an open relay.Quote:
Originally posted here by XpcorpC
Couldn't I just change the Return-Path in Phasma3000 to one of my e-mails? And also, when I use Phasma 3000, It says "Socket Error!" everytime.. can someone tell me what the problem is?
This is the log of what happens, and I get a Socket Error...
I've telneted to hotmail's (and many others') ESMTP and SMTP ports many times...and it appears less and less sites are allowing relays ( which is a good thing, considering the kinds "hackers" that are occupying the community these days).
lol
Just a thought...
I run a few sites and use www.godaddy.com to get domain names. If you indeed do not want to do anything illegal, well than for less than ten dollars a year you can rent a domain name and set up alias e-mails at that domain to forward to your e-mail address. They charge like .99 cents per 5 forwarding e-mails. As long as the name is available you can make anything you wish and forward to whatever.
Unsure exatly what you are trying to do but, Thought I would share this. I have found it to save my business alot in e-mail/domain setups.
You could use the telnet program to send anon email.... but im not sure if there is a way to make them reply to you or one of your friends