(Sep 26, 2016 10:12 AM)VoorMorgen Wrote:  Firstly, I'd like to know what I'm doing is even possible at all. I want to know if it's possible to spoof the email address of my former employer. It's a multinational so I imagine it's near impossible? If it helps I can buy some dedicated hardware if isn't too expensive. If quantity matters, I really just need to spoof the mail 2-3 times. Really dumb question but, if I do successfully spoof his e-mail, if the HR of the new company decided to reply with a simple "thank you" using the reply button, would it return to me or would it address the original owner of the e-mail, i.e. my boss?

I work in a snobby and elitist industry in London where people only hire from each other. A month and a half ago one of the largest shareholders decided to move up and employ and fast-tracked his wife who has 0 experience or knowledge in our field to manager. Needless to say, her lack of everything caused her to not command any respect so she decided to terrorize everyone into submission. I've called her on her bullshit several times but because of my performance she couldn't really do anything. She caught me joking around with co-workers telling inappropriate jokes during break. Decided everything was aimed at her and made harassment complaints. I've been fired and now need to pretend I wasn't and give myself an excellent e-mail reference.

(Sep 26, 2016 10:17 AM)Scy7e Wrote:  I don't know what you want to do with all that dedicated hardware. Literally anyone can send a spoofed email, all you need is to edit the From header and it will appear as if it came from your boss. The thing is, if someone replies, the reply will go back to your boss and you will never see the reply, but your may boss may see the spoofed email.

(Sep 26, 2016 11:05 AM)VoorMorgen Wrote:  Thanks for responding. That's unfortunate :/ back to the drawing table I guess.

(Sep 26, 2016 11:07 AM)Hubba Bubba Gum Wrote:  If you really wanted to, you could buy your own domain (name it similar to the company you work for) and create an email on it. Send an email to whoever your target is. Make sure the text before the @domain.com is the same as your boss' actual email.

Could give it a shot? Just thought of this.

(Sep 26, 2016 11:17 AM)VoorMorgen Wrote:  would it be possible to set up a shitty/blank wordpress website and redirect to their website? Or would this require admin level access to their website too?

(Sep 26, 2016 11:21 AM)Scy7e Wrote:  Do you mean like how a # link redirects the user to another page? If yes, no it doesn't require any admin access to their website. A simple HTTP 3xx Redirect will do. If not, I don't know what do you mean.

(Sep 26, 2016 11:34 AM)VoorMorgen Wrote:  Yes, I meant redirecting to an external page. i.e. if a curious individual would enter the domain (my fake) in the search bar it would automatically redirect them to the real website. For instance for the the law firm "kennedyslaw" (pretty known in the UK) I'd get kennedyLaw.com hoping for human error to overlook the missing s in the e-mail handle. If someone did however search for "KennedyLaw.com" It would redirect them to "Kennedyslaw.com" which is the real.

(Sep 26, 2016 11:35 AM)Hubba Bubba Gum Wrote:  I have absolutely no knowledge on this stuff, but I'm sure you could just make your site redirect without admin access to the other.

(Sep 26, 2016 10:17 AM)Scy7e Wrote:  I don't know what you want to do with all that dedicated hardware. Literally anyone can send a spoofed email, all you need is to edit the From header and it will appear as if it came from your boss. The thing is, if someone replies, the reply will go back to your boss and you will never see the reply, but your may boss may see the spoofed email.