Re: [PLUG] spoofing

[gabriel rosenkoetter <gr@eclipsed.net>]

On Mon, Sep 30, 2002 at 04:40:38PM -0400, gabriel rosenkoetter wrote:
> EHLO <your local host>
> MAIL FROM: Jason <jason@nocks.com>
> RCPT TO: <account>@hotmail.com
> DATA
> Subject: whee, faked source address
> 
> blah blah
> .
> QUIT

Whoops, sorry, made a few typos there, and some less-than-clear
character usages (< and > are a characters that matter a lot to
SMTP, I oughtn't have used them as fill-in-the-blank surrounders).
Let's say your Hotmail account is just called account and your on
the host foo.baz.dom (whose reverse DNS resolves properly). Then
you'd do this:

$ telnet mx1.hotmail.com 25
EHLO foo.baz.dom
MAIL FROM: <jason@nocks.com>
RCPT TO: <account@hotmail.com>
DATA
To: "Real Name" <account@hotmail.com>
From: Jason <jason@nocks.com>
Subject: Faked mail that'll work!

blah
.
RSET
QUIT

-- 
gabriel rosenkoetter
gr@eclipsed.net

Attachment: pgp1nH69nKHil.pgp
Description: PGP signature