Faking the source address of an email is easy, thanks to a neat set of tricks that anyone could master. Sending anonymous emails could be fun, but that's not all about it! The trick could be useful in various client side hacking, sending fake emails is an important part of social engineering. The trick is: using the address of a trusted company as source making the recipient fall for its authenticity, and you're done! |
1. First and foremost you need a fake email sender. You could very well create your own email account spoofer:
-You need a fake email sender script to get started. It's basically a PHP mail script that lets you change the source address of an email.
-You then need a free hosting service to host the PHP mail file. There are quite a few of these available: x10hosting.com, phpnet.us, 0000webhost.com etc.
2. One you're through the script phase, you can then send fake emails to anyone and everyone (read a potential prey!)
3. In receiver’s address add the email id of your potential prey.
4. In sender’s address add the email of some well known company like contact@facebook.com.
5. Enter a legit looking subject. Click send and that's all! The prey will now receive an email from contact@facebook.com.
Meanwhile, you could also check the authenticity of an email youn just received. Here's how:
1. Open the email you want to check.
2. Open its email header.
3. You will get a "received from: so and so" followed by an IP address.
4. Copy the IP Address and trace its location.
Author : Shivam Kotwalia, CodeKill