Anyone can tell about how to spoof sms and email
How to spoof sms and email |
(May 15, 2024 01:06 PM)___3Line Wrote: Anyone can tell about how to spoof sms and email I know that SMS spoofing of a sort is or was possible. I'd have to research it again, and you could do that, too. Email spoofing used to be possible, but today if you wanted to spoof a known domain, you would have to spoof the IP address of that domain, which is impossible.
email spoofing is a technique used in spam and phishing attacks to trick users into thinking a message came from a person or entity they know or trust. In spoofing attacks, the sender forges email headers so that client software displays the fraudulent sender address, which most users take at face value
Jun 4, 2024 09:19 AM
(This post was last modified: Jun 4, 2024 09:20 AM by DramaKing.)
(May 17, 2024 06:10 PM)chitbox Wrote: Email spoofing requires being able to send spoofed packets if I remember correctly. I do believe there are some resources available. You might have some luck using the search feature here. You may have to check other sources as well, due to this topic is touchy nowadays. You can't spoof IP addresses when sending an email. You'd break the connection. At least I think that's your meaning. (Jun 4, 2024 08:24 AM)snyk Wrote: email spoofing is a technique used in spam and phishing attacks to trick users into thinking a message came from a person or entity they know or trust. In spoofing attacks, the sender forges email headers so that client software displays the fraudulent sender address, which most users take at face value Only high-quality, original posts, please. Or you should at least give your source. (Jun 4, 2024 09:19 AM)DramaKing Wrote: You can't spoof IP addresses when sending an email. You'd break the connection. At least I think that's your meaning. actually when you send e-mail you use the domain or api not the ip ( no reputable mailbox do that ), so it's very possible to spoof domain if there is misconfiguration in it's SPF or DKIM best regards
It used to be quite easy to spoof email using the PHP mail() function - ive not tried it in a long while, but i believe now, using that method just either sends your email straight to the spam folder, or completely rejected by the mail server.
I have no experience with SMS spoofing. I know there are some scripts on GitHub that claim spoofing and/or bombing but i am unable to verify as i dont live in America and all the scripts i have come across require an American phone number.
Always willing to help, learn and teach. Hit me up if you need help.
(Jun 4, 2024 09:36 AM)Uolcan Wrote: actually when you send e-mail you use the domain or api not the ip ( no reputable mailbox do that ), so it's very possible to spoof domain if there is misconfiguration in it's SPF or DKIM IF there's a misconfiguration, don't know if OP has a specific domain in mind. (Jun 4, 2024 01:09 PM)SilentNuke Wrote: It used to be quite easy to spoof email using the PHP mail() function - ive not tried it in a long while, but i believe now, using that method just either sends your email straight to the spam folder, or completely rejected by the mail server. Correct and not as it used to be (Jun 4, 2024 04:56 PM)DramaKing Wrote: IF there's a misconfiguration, don't know if OP has a specific domain in mind. sure "IF" but i must mention that the chance is very big to find misconfiguration in the target subdomains if the domain don't have this (Jun 5, 2024 06:52 PM)thisisfoz Wrote: You can use what is known as phpmailer to impersonate email senders, for example. no tool will work with you unless there is problem in domain security policy's (Jun 5, 2024 07:00 PM)Uolcan Wrote: no tool will work with you unless there is problem in domain security policy's no need to quote me because it seems you don't know what is called phpmailer. i used those way back 7yrs ago and still works till date. (Jun 5, 2024 08:38 PM)thisisfoz Wrote: no need to quote me because it seems you don't know what is called phpmailer. i used those way back 7yrs ago and still works till date. Is it some kind of magic exploit tool that bypasses SPF, DMARC, and DKIM checks? |
|
|


