SendEmail relay server

[foster]

Hello all,

I have a quick question: i have been trying to test a pdf-infected file on my own network , which will enable me to have access to the remote system on my LAN from my BT4 machine to my win xp machine. I complete creating the exploit but when i try to send the email with the exploit in it it tells me that the connection has timed out. In other words, i need a relay mail server in order to test it.
I have searched for it on the internet but i can not find what i am looking for, does anyone of you know how to perform this task?

Thanks in advanced...

[lupin]

You need to appropriately configure an SMTP server such as sendmail.

[foster]

Lupin,

Thanks a lot, i have been trying to use SET and Framework3 on this topic but i keep on having the same issue. Gmail detects when i use a pdf exploit and i can not send it to my email.
Since i only have two option: use a gmail account or an open relay server, is there info on how to set this on your own computer or something like that? I have been looking over the net but all i can find is that its something illegal and nothing else.
If someone could point me on the right direction i would really appreciate.
Thanks

[Henrik]

I would like to bump this post.

I am looking at the technique of email spoofing, and struggling a bit on the open relay smtp server part.
If anyone could help me out making a postfix server to work with it, that would be great

Thanks in advance.

[halfdone]

I had to create a AOL account for that, it would be nicer to be able to use some other smtp server so senders Email Address could look like "support@support.com"

[signat]

You could also configure an email server at your house to send mail to.

Gentoo Linux Documentation -- Virtual Mailhosting System with Postfix Guide

[Mr-Protocol]

Most companies (99.99%) do not have an open relay mail server due to spam. A few years ago I had found one on a cable company that lasted for a good 5 years, even after they were bought out and the names were changed. But recently (within the past year or so) they have fixed the open relay part of it. I actually had made a VB program to interact with it to send emails or text messages.

The thing with open relay is you do not need authorization (a user account/pass) to send mail from it. So you could spoof the addresses and all that fun stuff. Any mail server should work as long as you give a correct login in the way it wants. My advice would be pick your mail server, telnet to it, and play around with it to find out how to send an email.

[halfdone]

I finally found the way to spoof emal senders address. All you need is a open relay smtp server and sendEmail. most of isps provides those smtp servers who doest require authentication. its really easy.

[pentest09]

could someone post the steps taken to set up the smtp relay please as all that is posted is "yes i can be done"

thanx

[TAPE]

I finally found the way to spoof emal senders address. All you need is a open relay smtp server and sendEmail. most of isps provides those smtp servers who doest require authentication. its really easy.

Dont think that is going to win 1st prize in most helpful post of the year award..
A bit more detail may have contributed a bit more

Back on topic;

First of all you should check what the smtp server is of your internet provider.
www.whatismyipaddress.com This will show you your ISP details.
Then
www.e-eeasy.com/SMTPServerList.aspxSearch To check your ISP and note the smtp info.
There are numerous sites up with smtp info, so if yours is not included in the above, do a google on smtp server lists.

Now you have that the next stage is to create an email with sendEmail (this all based on having a working internet connection up and running on backtrack of course);
Open up a shell and view the options.

 
sendEmail
sendEmail-1.55 by Brandon Zehm <caspian@dotconf.net>

Synopsis:  sendEmail -f ADDRESS [options]

  Required:
    -f ADDRESS                from (sender) email address
    * At least one recipient required via -t, -cc, or -bcc
    * Message body required via -m, STDIN, or -o message-file=FILE

  Common:
    -t ADDRESS [ADDR ...]     to email address(es)
    -u SUBJECT                message subject
    -m MESSAGE                 message body
    -s SERVER[:PORT]           smtp mail relay, default is localhost:25

Now let's prepare an early Valentine message to my better half.
(remember that the email is not anonymous, the headers will show from which IP it was sent.
Some people [such as my better half..] do not know how to check that though)

sendEmail -f "Your Secret Admirer<Secret@Admirer.com>" -t better@half.com \
-u "Will you be my Valentine ?" -s smtp.isp.here

You will then be presented with ;

Reading message body from STDIN because the '-m' option was not used.
If you are manually typing in a message:
- First line must be received within 60 seconds.
- End manual input with a CTRL-D on its own line.

So get typing your Valentine message;

Roses are Red
Violets are Blue
etc
etc

Ctrl D on its own (new) line

May 29 09:35:47 backtrack sendEmail[6131]: Message input complete.
May 29 09:35:49 backtrack sendEmail[6131]: Email was sent successfully!

An alternative to using the isp's smtp is to use for instance gmail's smtp server.
For this you will have to enter your gmail login and password;

sendEmail -f Me@email.com -t You@email.com -u "Test Subject" -m "Message Body Text" \
-s smtp.gmail.com -xu yourgmail@gmail.com -xp gmailpassword

Note that -xp password may require (single) quotes if special characters in password.


The 'problem' with this method is that the return address will always be you gmail address, so in addition to sending the IP address from the connection you are mailing from, with this method also the gmail accout..

Depends on what you want to do I suppose.

Hope the above of help / intrerest to someone.