(Jan 2, 2021 01:53 PM)Apricus Wrote:  Hey Everyone!

This is my first tutorial, so please free to reply with any suggestions! In this tutorial, I will exemplify how to programmatically spoof an SMS text using the 46elks API.


Steps:

1. To begin head over and register with 46elks. This company is essentially an SMS gateway service that you can utilize to send messages. Make sure when you sign up to utilize a professional email, the email can be from any organization, however, avoid using generic emails such as yahoo or Gmail. (I used my university email .edu).

2. Complete the verification process with 46elks. Because of people like us (anyone trying to spoof SMS), 46elks will call you to verify that you actually do represent the organization your email specifies. In our case, you really just need to social engineer the representative on the phone. For example, come up with something convincing, saying you're using their API to test sending alert messages to your organization employees

3. Now that you have a verified account setup you should be granted around 2 euros in test credit. Head over to your favorite code editor and utilize the code in step 4 to send your first spoofed message :)

4. Make sure you have python and its dependencies installed on your machine and copy and paste the following script into your favorite code editor (I use VS code, however even Idle works!) Make sure to run pip3 install requests first for the dependency!

Code

import requests
response = requests.post(
  'https://api.46elks.com/a1/sms',
  auth = ("your api key"),
  data = {
    'from': 'the number you want to send the message from',
    'to': 'the number you want to recieve the message',
    'message': "I learned this from darkhorse13!"
  }
)
print(response.text)

5. You should receive a spoof text at the number you specified within the script!

I hope you enjoyed this simple tutorial! I will hopefully be posting more related ones soon 😁
If you have questions feel free to reply below or shoot me a PM!
darkhorse13