+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: sending a spoofed email (/showthread.php?tid=5820583)
sending a spoofed email - usrnvm - Apr 4, 2018
I've looked deep into a Donation Reward system integrated on a game, and found out that they do validate their donations on paypal through the email that paypal sends back as confirmation to their email. I've got some similar game-files, de-compiled (JAVA) the sources and found this ->
Code
if (((msgCont instanceof String)) && (from.endsWith("<[email protected]>")))
{
String str = msgCont.toString();
String[] strs = str.split("\n");
if (strs[2].startsWith("This email confirms that you have received a donation of€")) {
Main.handleDonation("Paypal", strs[2].split("\\)")[0].split("\\(")[1], str.split("Confirmation number: ")[1].substring(0, 17), (int)Double.parseDouble(strs[2].substring(57, strs[2].indexOf(" EUR"))));
} else {
System.out.println("[FATAL] Corrupted donation from:\n->" + from + " (Please check this eMail)");
}
}As you can see they check the tag FROM if ends with -> <[email protected]>.
So the trick here to exploit their system would be to send an email with a FROM tag that ends with <[email protected]>.
I've tried a few php based spooffers, but no luck yet.
Any idea if thats possible?
RE: sending a spoofed email - kayla_90 - Apr 5, 2018
Op if you are familiar with linux,then ghost phisher is your answer. it spoofes your dns and ip. Plenty tutorials out there. A;so check vids on youtube,good luck.