home *** CD-ROM | disk | FTP | other *** search
-
- I wrote this phile after about 10 minutes of server hacking. If I can do
- it, so can you, so don't bother me with e-mail about it. If you can't
- follow the directions, you shouldn't be on the 'net.
-
- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- If this file does not end with the letters "EOF" alone on a line, you do
- not have the full file.
-
- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
- How to Send Fakemail
- --------------------
- By Doc Rain
-
- NOTE: The methods contained herein are for educational purposes only, and
- are not to be used for any purposes. Yeah. Right.
-
-
- What is FAKEMAIL?
- =================
- Fakemail is a great little hack that's been overlooked in the SMTP (Simple
- Mail Transport Protocol) mailing protocol. By telnetting to a mail server
- on port 25, you can manually send mail information to a server. By these
- methods, you can pretend to be anyone else, "sending" from any address,
- real or not.
-
-
- Can I Get Caught Sending FAKEMAIL?
- ==================================
- Yes and no. When you send fakemail, although your faked address will show
- in the "To:" field of a message, in the header, amidst all the
- gobbledygook is the address of the server you used to send the fakemail.
- But even if the person sees this (which they probably won't, since most
- mail programs hide the mail header unless requested), it only shows the
- host. So chances are you won't get caught. But if you use these tecniques
- to send a death threat to the president of the United States, you will get
- caught, since your provider will check it's records, and check the host in
- the header, and see that you were on that server then. The Secret Service
- has a lot of time on its hands to catch swarthy criminals like you.
-
-
- How do I send FAKEMAIL?
- =======================
- NOTE: All commands typed here should be in ALL CAPS. At least that's the
- only way my server will accept it.
-
- 1.) Telnet to your mailserver, on port 25.
- 2.) Type "HELO <hostname>" where "hostname" is filled in. DON'T BE AN IDIOT!!!
- DO NOT PUT IN YOUR REAL HOST!!!!
- 3.) Enter "MAIL FROM:<sender>" where sender is your faked address.
- 4.) Type in "RCPT TO:<recipient>" where recipient is your addressee.
- 5.) Enter "DATA"
-
- You will then be prompted to enter your message text. Put a period on a
- line by itself to end the message. You may now quit the server by sending
- "QUIT" (duh?).
-
- You have now sent your first fakemail!
-
-
- Some Other SMTP Commands:
- =========================
- EHLO <hostname> - logs in with hostname into extended SMTP if supported
- RSET - resets the system (you should do this between consecutive
- fakemails to clear the previous data)
- NOOP - Does nothing (Don't ask why)
- VRFY <address> - Verifies the address in <address>
- EXPN <address> - Expand <address>. If address is mailing list, shows the
- contents of that list.
- VERB - Puts server into verbose mode, if availible.
-
-
-