UGN Security Forums
My ProfileMember DirectoryLogin
Search our ForumsView our FAQView our Site Rules
View our CalendarView our Active TopicsGo to our Main Page

UGN Security Store
 

Network Sites UGN Security, The GoNix Initiative, Elite Web Gamers, Back of the Web, EveryDay Helper, VNC Web Design & Development
Sponsored Links
Latest Postings
Latest Reviews
Topic Options
Rate This Topic
#6965 - 06/04/02 04:28 PM anonymity
IceDroppa Offline
Junior Member

Registered: 06/04/02
Posts: 2
Loc: Hell
how do i send an anonymous untraceable email to somebody (as in they wont know who i am so they cant fire me)? i know, im a newbie at this kind of thing.
_________________________
A Single Drop Of Ice

Top
Sponsored Links
      
#6966 - 06/04/02 05:37 PM Re: anonymity
Mornse Offline
Member

Registered: 03/03/02
Posts: 185
Loc: Vancouver
http://www.happyhacker.org/gtmhh/vol1no2.shtml

this is where I learned how, it's still a bit traceable though cause your IP will be in the headings of the email if the person receiving the email knows where to look.
_________________________
Cha want some w***up?

http://www.dopeskill.com

Top
#6967 - 06/06/02 08:04 AM Re: anonymity
SilentRage Offline
DollarDNS Owner

Registered: 03/04/02
Posts: 1273
Loc: OH, USA
ya, just send the email from a school computer or something.
_________________________
Domain Registration, Hosting, Management
http://www.dollardns.net

Top
#6968 - 06/06/02 04:56 PM Re: anonymity
Gremelin Offline

Community Owner
*****

Registered: 02/28/02
Posts: 7193
Loc: Portland, OR; USA
I pefer libarys...
_________________________
Donate to UGN Security here.
UGN Security, Back of the Web, Elite Web Gamers & VNC Web Design Owner

Top
#6969 - 06/10/02 12:58 PM Re: anonymity
Jitendra Offline
Junior Member

Registered: 06/10/02
Posts: 12
Quote:
Originally posted by Mornse:
http://www.happyhacker.org/gtmhh/vol1no2.shtml

this is where I learned how, it's still a bit traceable though cause your IP will be in the headings of the email if the person receiving the email knows where to look.
Ya this is where I learned too...can be a good intro to some extremely basic telnetting too.

Top
#6970 - 06/10/02 02:31 PM Re: anonymity
SilentRage Offline
DollarDNS Owner

Registered: 03/04/02
Posts: 1273
Loc: OH, USA
I decided to chatter about something in specific about email headers...

How to find the sender user's IP and a unique way to spoof your own:

1) First thing you need to know how how an email gets from your yahoo account to your friends hotmail account (an example).

You open your yahoo account and you start typing in your email. When you press "Submit" yahoo takes your email and slaps a "Recieved: " entry in there. It says when the email was recieved by yahoo and from what IP it originated and so on. So that recieved is the first recieved entry stuck onto the top of your email and headers and all.

Then yahoo resolves hotmail.com and says "alrighty, I need to send this to mx01.hotmail.com". Then it connects to that server and passes the email on.

Now mx01.hotmail.com recieved the email and slaps another Recieved: entry onto the TOP of the email. Again, it includes the IP address of yahoo's mail server and the time it recieved it. It will also include what yahoo's server announced themself to be via the HELO or EHLO commands.

And that's the gist of it. there may be many recieved entries cause the mail servers may bounce it around a few times before it actually gets to ya. But ALWAYS there is at LEAST 1 recieved entry in the headers. The original being the last recieved entry (since all following recieved entries are prepended to the top.

The way that you can find out where an email comes from is via the "Recieved: " header entries.

2) Now you know how email is sent, and how it is recieved. more importantly, you know where the original IP address can be found. Now it is time to consider this unique spoofing technique that I've figured out.

Spoof recieved entries! As the reciever, you look at the last recieved entry for the origin IP right? Well, when composing the RAW email - add a few convincing looking recieved entries as if the email has bounced around a few times. Then send it directly (or not - it doesn't matter) to the reciever's mail server. Make sure that you use the HELO (or EHLO) command with a satisfactorily spoofed hostname.

Now unless the reciever attempts to resolve every IP in the headers and look for incorrect IP/host matches - they'll never know which recieved is the REAL original IP. And typically, they'll think it's the last (spoofed) entry.
_________________________
Domain Registration, Hosting, Management
http://www.dollardns.net

Top

Moderator:  Infinite 
Featured Member
Registered: 10/28/14
Posts: 1
Forum Stats
2149 Members
46 Forums
35357 Topics
70527 Posts

Max Online: 1567 @ 04/25/10 05:20 AM
Top Posters
UGN Security 28518
Gremelin 7193
§intå× 3255
SilentRage 1273
Ice 1146
pergesu 1136
Infinite 1041
jonconley 955
Girlie 908
unreal 860
Newest Members
Tim050, Gecko666, defghi795767, Devo60, ali
2148 Registered Users
Who's Online
0 registered (), 402 Guests and 316 Spiders online.
Key: Admin, Global Mod, Mod
Latest News
luxury goods sales at $405B by 2019
by golqm
10/28/14 05:19 AM


Donate
  Get Firefox!
Get FireFox!