I wrote this phile after about 10 minutes of server hacking. If I can do it, so can you, so don't bother me with e-mail about it. If you can't follow the directions, you shouldn't be on the 'net. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ If this file does not end with the letters "EOF" alone on a line, you do not have the full file. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ How to Send Fakemail -------------------- By Doc Rain NOTE: The methods contained herein are for educational purposes only, and are not to be used for any purposes. Yeah. Right. What is FAKEMAIL? ================= Fakemail is a great little hack that's been overlooked in the SMTP (Simple Mail Transport Protocol) mailing protocol. By telnetting to a mail server on port 25, you can manually send mail information to a server. By these methods, you can pretend to be anyone else, "sending" from any address, real or not. Can I Get Caught Sending FAKEMAIL? ================================== Yes and no. When you send fakemail, although your faked address will show in the "To:" field of a message, in the header, amidst all the gobbledygook is the address of the server you used to send the fakemail. But even if the person sees this (which they probably won't, since most mail programs hide the mail header unless requested), it only shows the host. So chances are you won't get caught. But if you use these tecniques to send a death threat to the president of the United States, you will get caught, since your provider will check it's records, and check the host in the header, and see that you were on that server then. The Secret Service has a lot of time on its hands to catch swarthy criminals like you. How do I send FAKEMAIL? ======================= NOTE: All commands typed here should be in ALL CAPS. At least that's the only way my server will accept it. 1.) Telnet to your mailserver, on port 25. 2.) Type "HELO " where "hostname" is filled in. DON'T BE AN IDIOT!!! DO NOT PUT IN YOUR REAL HOST!!!! 3.) Enter "MAIL FROM:" where sender is your faked address. 4.) Type in "RCPT TO:" where recipient is your addressee. 5.) Enter "DATA" You will then be prompted to enter your message text. Put a period on a line by itself to end the message. You may now quit the server by sending "QUIT" (duh?). You have now sent your first fakemail! Some Other SMTP Commands: ========================= EHLO - logs in with hostname into extended SMTP if supported RSET - resets the system (you should do this between consecutive fakemails to clear the previous data) NOOP - Does nothing (Don't ask why) VRFY
- Verifies the address in
EXPN
- Expand
. If address is mailing list, shows the contents of that list. VERB - Puts server into verbose mode, if availible.