Basics of working of Email ( You can skip this part)

Email stands for Electronic Mail. Email sending and receiving is controlled by the Email servers.Email service providers configure Email Server before anyone can Sign into his or her account and start communicating digitally.Users from across the world register in to these Email servers and setup an Email account.


Email Travelling Path :-
Let’s say we have two Email providers, one is gmail.com and other is yahoo.com, ABC is a registered user in gmail.com and XYZ is a registered user in yahoo.com.
• ABC signs in to his Email account in gmail.com, he then writes a mail to the xyz@yahoo.com and sends the message.
• But what happens behind the curtains, the Email from the computer of abc@gmail.com is forwarded to the Email server of gmail.com. Server of gmail.com then looks for yahoo.com on the internet and forwards the Email of the yahoo.com for the account of XYZ@yahoo.com. Yahoo server puts that email in that account.
• XYZ then sits on computer and signs in to her Email account.Now she has the message in her Email inbox.



 Sending Fake/spoofed Email -:  Fake or spoofed email means the email from any email ID. It doesn't matter whether the sender's email really exists or not. Sender's email ID can be anything@anything.com. 


   Read the disclaimer before proceeding


Methods :-


1. Using Open Relay servers :  An open relay server is that which allows people to send email by connecting to it. User connect to it via telnet and instructs server to send email. This method is outdated or simply I should say that, it doesn't work. I would not talk about it more.

2. Using Websites : There are numberless websites that provide free service to send fake emails. But the problem is that they attach the advertisments along with your email.  But the best two, I have found that do not attach the advertisments.

www.emkei.cz      {have some advance options}
www.hidemyass.biz/fake-mailer/

3. Using mail sending scripts : The PHP contains mail sending function which allows us to send email with fake headers.
Download a php script from here.
We just need to upload the mail sending script on a web hosting site. It doesn't work on every webshosting site because there is no email sending support.  I have tested x10hosting.com (could take upto a day for account activation) , it works perfect. Some of the other are www.000webhost.com,byethehost5.com

Note: This script contains options of sending spoofed email, spamming and email bombing. Your hosting account might be immediately suspended on spamming/bombing. But it works perfect if you have any your own premium web hosting account. If you want to try email bomber, I could let you to use my own if sufficient people request in comments.

What is Email Spamming and Email Bombing ?

Email Bombing as clear from the name is sending the mass emails that is large number of emails to a email ID in a single click. Email spamming is like sending an email to large number of email IDs in a single click. These activties are performed mainly for the advertisements of the products or services provided by a company. Many spammers spam to collect individual's personal information through some stupid things like 'fill these details to get your lottery amount' and that information is sold to businessmen looking for the people of different categories. There could be many more reasons of spamming. Spammers use automated tools to collect as many emails available on websites,forms,chat rooms and send spams to them.

How to identify whether an email is real or spoofed ?

It can be done by checking headers. Email headers is simply the text which contains the information about the mail servers that the email encountered in its path from the sender to receiver. It contains a lot of other information too.
Note: I am just telling you a few points about this so that you would just get an idea about the approach. This may or may not depend on some factors.

We can view email headers in gmail by clicking at 'show orignal', in yahoo by clicking at 'Full headers' and such kinds of options in other email service providers.

If  you get an email displaying sender's email like someone@gmail.com, someone@hotmail.com, someone@yahoo.com . Then it should be orignated from gmail,hotmail and yahoo servers respectively. But if it doesn't, the most probably the email would be fake. 

I will show you by an example, I received three emails in my gmail inbox from sender's address "someone@gmail.com."  Sender's address shows me that they should have been orignated from gmail/google server, if they would be real.

Note : There is a field called "Return-path" in headers.  If the email ID shown in this field and email ID you get as sender's email ID doesnt match, then the email is surely fake.






Can we get sender's IP address from Email Headers ?

We may or may not. Gmail, yahoo normally do not reveal sender's IP address. But when we send an email from a php script,  the headers might reveal Sender's IP. The conclusion is that answer to this question varies from different email service providers and the way how email is sent.


Can we trace sender's location, if we get his IP address ?

The IP address could only tell that which Internet Service Provider (ISP) is used by sender. Further details can not be revealed without the help of that ISP. Normally the Public IP is dynamic that is it keeps changing. We need to ask ISP about the user who was assigned that IP at the time email was sent. If sender has purchased a static IP address, it doesn't matter that when exactly was email sent. He could easily be traced.



Feel free to ask any queries in comments.

70 comments:

Post a Comment
  1. Really Nice Article Aneesh. Explore Hacking Rocking :)

  2. i want to know how to hacking a person email account

  3. This is a nice site, been exploring it. Lot's of good articles, indepth with details, noob friendly, and recent.

  4. Awesome info...
    Thanks allot.

  5. Thanks everybody for your feedback .

  6. informative article.
    Thnks..:)

  7. giv me script code link like it vey much
    wanted to do project with this topic
    pls. giv link as soon as possible n reference for details.....
    waiting for u r reply bro.......

  8. hello aneesh..

    hey thnx bro for this article. i have uploaded your this php script in my free "my3gb" account. but it is not working there.. will u plz send me ur that link which u mentioned above for email bombing.....

  9. Is there any way to track the actual user's ID if they have used a website such as emkei.cz?

  10. good wrk

  11. plz i need ur email bomber.........

  12. heyy! wanna try email bombin!!! any help will be appreciated!

  13. Really helpful. good work aneesh! go on........

  14. hi frnd i have a problem also

    i want to send fake sms is it possible..

    my id e\s eng.vikas90@gmail.com
    plz help me,

  15. I have seen a lot of hacking forums and weblogs but, i have to say something......
    Your web is the best dude.....
    Good luck & continue posting up cool tuts.....
    ♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣
    ♣M4tin-T3rr0r From ir♣
    ♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣♣

  16. hey i really appriciate ur stuff, u r really awesome. I want to try mail bombing from ur website coz mine host ( www.000webhost.com) already suspend my 3 accounts for doing so. I also maded phishing attacks of gmail, yahoo & facebook with masking and know how to do sms bombing (too easy) and fake sms with no header or anything to get reconised and lot more. Plz send me ur website link with username nd pwd on jack_s99@yahoo.com to try ur bomber. If any other want to know or want any stuff from me then send me the mail.to try mail bombing from ur website coz mine host ( www.000webhost.com) already suspend my 3 accounts for doing so. I also maded phishing attacks of gmail, yahoo & facebook with masking and know how to do sms bombing (too easy) and fake sms with no header or anything to get reconised and lot more. Plz send me ur website link with username nd pwd on jack_s99@yahoo.com to try ur bomber. If any other want to know or want any stuff from me then send me the mail.

  17. I have removed mine. i apologise for that. Get a premium webhosting account .

  18. I like this article so much!!!!!!

  19. dude give mee emailer bomber !! whey its not worki ng i tried in t35.com

  20. hey nice article...
    but will u tell me how to find sender is orignal and not faker..

    as u said in gmail there is option called Show Original its there in basic html of gmail.. but as we r using beta gmail i hv not found anywhere show orignal option...

    will please tell me how should i check show orignal in Updated gmail version??

  21. hey nice article...
    but will u tell me how to find sender is orignal and not faker..

    as u said in gmail there is option called Show Original its there in basic html of gmail.. but as we r using beta gmail i hv not found anywhere show orignal option...

    will please tell me how should i check show orignal in Updated gmail version??

  22. hey everyone,
    1) try sms bomber/spammer, just install the software in ur cell and its done.
    http://www.ziddu.com/download/14685207/okAccount-FacebookBomberbywww.latest-hackers.co.cc.zip.html (put 0 before the no not the 91 or +91 else it will show an error)
    2) for email bomber/spammer.
    http://www.thesecretofhacking.com/sw/ch5/ebomb.rar
    For video tutorial watch this:
    http://www.thesecretofhacking.com/vd/ch5/cs2
    Upload all the files in any free hosting (i m using 000webhost.com,u have to submit ticket after 24 hrs to make it active).
    For any other help mail me on jack_s99@yahoo.comt install the software in ur cell and its done.
    http://www.ziddu.com/download/14685207/okAccount-FacebookBomberbywww.latest-hackers.co.cc.zip.html (put 0 before the no not the 91 or +91 else it will show an error)
    2) for email bomber/spammer.
    http://www.thesecretofhacking.com/sw/ch5/ebomb.rar
    For video tutorial watch this:
    http://www.thesecretofhacking.com/vd/ch5/cs2
    Upload all the files in any free hosting (i m using 000webhost.com,u have to submit ticket after 24 hrs to make it active).
    For any other help mail me on jack_s99@yahoo.com

  23. hey, can u tell me something about database hacking or how to get through the it by blocking the proxy server and database securities etc.
    Plz send me the info if u have any premium hosting or any other working right now for email bombing.w to get through the it by blocking the proxy server and database securities etc.
    Plz also send me the info if u have any premium hosting or any other working right now for email bombing.

  24. http://www.antirussia.org/an_email.html

  25. Return-Path:
    Received: from cp1.cpservers.info (cp1.cpservers.info [95.154.207.180])
    by mx.google.com with ESMTPS id b5si2747218wbh.66.2011.08.25.15.17.32
    (version=TLSv1/SSLv3 cipher=OTHER);
    Thu, 25 Aug 2011 15:17:32 -0700 (PDT)
    Received-SPF: pass (google.com: best guess record for domain of sendemil@cp1.cpservers.info designates 95.154.207.180 as permitted sender) client-ip=95.154.207.180;
    Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of sendemil@cp1.cpservers.info designates 95.154.207.180 as permitted sender) smtp.mail=sendemil@cp1.cpservers.info
    Received: from sendemil by cp1.cpservers.info with local (Exim 4.69)
    (envelope-from )
    id 1QwiEt-00033o-QI










    ....................................
    Please tell Is this Mail Fake or not
    ....................................

  26. pls can u help me on how to send the fake mail

  27. good article. I like it so much. Thanks for all posting.

  28. AwesOme stuFF..
    hey guyzz visit my blOg..
    www.almashackingtutorials.blogspot.com

  29. Great poat I have been a systems admin for over 5 years and spend a lot of my time blocking relays and updating exchange to avoid spam issues. The best way to help protect against something is to know how it works. Great article and thanks for the useful information.

  30. nice wrk bro !!!!!

  31. please explain how to upload php mail sending script on x10hosting.com I have created an account there but found no option of uploading. My id is raj.aryan2021@rediffmail.com

  32. Thanks for the article, man! :) Could you please post your mail bombing script? Thanks in advance!

  33. nice

  34. please tell me to find sender details. please. he sended a msg through gmail

  35. try this is working
    http://antirussia.org/anonymous/fake-mail/

  36. plz tell me how can i hack a person facebook account.........
    send me information on my mail hrshtjn60@gmail.com

  37. A particular email address has been sending us fake emails and extracting our clients details. I want you to please explain to me how can i develop a link that when the user clicks on that link I can access his email address and password so I can deactivate his account.

  38. awesome artical good work dear

  39. Is there any chance to send a mail from ,other than that particular company?

  40. Cool apps that for the information

  41. The website directing you here was not a Facebook page. If you entered your Facebook login information on the previous site, you will need to reset your password.

    please help..i am able to get gmail thingy wrk bt facebook...this mesage come...what could be done...??

  42. Tried your two links from section two

    www.hidemyass.biz/fake-mailer/ that link doesn't work

    neither does www.hidemyass.biz

    www.emkei.cz I sent an email from that site, but it never arrived at the destination

  43. UR Website iS Simple easy to understand Good Sir Keep Teaching Us

  44. email bomber plz???

  45. this is my offer letter is this from fake id plzz help.............

    Delivered-To: vishnu2552@gmail.com
    Received: by 10.229.234.71 with SMTP id kb7csp16433qcb;
    Thu, 5 Jul 2012 02:40:19 -0700 (PDT)
    Return-Path:
    Received-SPF: pass (google.com: domain of krishna.manoj5@gmail.com designates 10.52.98.8 as permitted sender) client-ip=10.52.98.8;
    Authentication-Results: mr.google.com; spf=pass (google.com: domain of krishna.manoj5@gmail.com designates 10.52.98.8 as permitted sender) smtp.mail=krishna.manoj5@gmail.com; dkim=pass header.i=krishna.manoj5@gmail.com
    Received: from mr.google.com ([10.52.98.8])
    by 10.52.98.8 with SMTP id ee8mr10106558vdb.58.1341481219817 (num_hops = 1);
    Thu, 05 Jul 2012 02:40:19 -0700 (PDT)
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
    d=gmail.com; s=20120113;
    h=mime-version:date:message-id:subject:from:to:content-type;
    bh=AOQoEwAVHI82gUarh2wdl0fM/FY29AmNtM3NBh+gPJI=;
    b=gPJlMaVMoKXQpqWzCODriGLhMhQlIgnyfuLEH70K2/Cv2lftauRdf4PghfyjkgPmmO
    E2ET/+IgKcYJKX+kGo1YCwIzr0GIjfUzdCEJzFELAyNe/XrGz3i2l+j7IIHCfFu5Fccv
    jPyMQ3WPF4ETkb/QTr/5hh1QhLNyqL+GS8xp8tGgz3kX8BhcTozJwxsyIm2yAJ99tDqa
    l9jbo99kqARi1pHbYKl/TkNqMHGE4XrrMsjgUeb+MQh1VBA/sm5oJXVnrpggCoKhxe6B
    VzIBW5eSUwBPIcpoqvASiECI08rzwuucWJkB1ho8tFxKOtKJOtXdUjLvFHvYMplV7Prv
    7pbg==
    MIME-Version: 1.0
    Received: by 10.52.98.8 with SMTP id ee8mr10106558vdb.58.1341481219785; Thu,
    05 Jul 2012 02:40:19 -0700 (PDT)
    Received: by 10.220.61.78 with HTTP; Thu, 5 Jul 2012 02:40:19 -0700 (PDT)
    Date: Thu, 5 Jul 2012 15:10:19 +0530
    Message-ID:
    Subject: xdjk
    From: manoj krishna
    To: vishnu saideep
    Content-Type: multipart/mixed; boundary=20cf307f33ee9405cb04c411ef1b

    --20cf307f33ee9405cb04c411ef1b
    Content-Type: multipart/alternative; boundary=20cf307f33ee9405c604c411ef19

    --20cf307f33ee9405c604c411ef19
    Content-Type: text/plain; charset=ISO-8859-1



    --20cf307f33ee9405c604c411ef19
    Content-Type: text/html; charset=ISO-8859-1




    --20cf307f33ee9405c604c411ef19--
    --20cf307f33ee9405cb04c411ef1b
    Content-Type: application/pdf; name="ACCEPTENCE.pdf"
    Content-Disposition: attachment; filename="ACCEPTENCE.pdf"
    Content-Transfer-Encoding: base64
    X-Attachment-Id: f_h49n9oo80

  46. hi Aneesh, Will u plz help me and send some ebooks or other materials,links etc on my email id. It's ece.kct07@gmail.com

  47. Thanks for sharing

  48. works like a charms. thx

  49. all your links giving me 404 error

  50. Hey Guys,
    awesome article
    but i have a problem that when i send to a gmail account it appear that it is a fake mail by writing the server name
    (via srv14.000webhost.com, mailed-by: srv14.000webhost.com)

    Please Heeeeeelp

  51. I need to find out how to get the original ip address from this fake email

    20120831195535.E2676D57FB@emkei.cz

    Any help would be appreciated

  52. i need your email bomber site. and plz tell how i can buy premium and use as email bomber.

    cheers

  53. how to send fake message from FB?

  54. just wanna ask bout emkei.cz....iv'e tried it once and it really works..i did able to send fake fb messages using anybodys email..however after a week i again tried doing it,unfortunately it didn't work anymore..y is that so????

  55. how we hack a fb account ; revert me kambojguys8@gmail.com

  56. Powerful info. Thanks man!

  57. rzecznik@nop.org.pl

  58. nabiran@wtech.rub.de

  59. hello i need a php mailer ! to uploaded more email list ! not to send 1 email , evrey time ! is u have one this php arhive ! please contact me : ICQ id r0b0tel@aol.com ! i give other suff for exchange !

  60. Really nice post..can u tell me about some softwares that can be used for email spoofing or phisphing stuff...can u..?????

  61. hello
    We are a team of professionals that can help you to find passwords for gmail, hotmail, yahoo, aol, orange, live, facebook. If you think we can help you contact us:
    discovermypass@yahoo.com
    http://getmypassword.tk/

    Payment is made ONLY AFTER you are THROUGHLY convinced with the proofs that we send you.

    KEYWORDS USED:
    hacking passwords, password hacking, email pass, email
    passwd, hack computers, hacking hotmail password, reset
    or forgot email password, yahoo password cheap services, hack email passwords,
    crack aol or hotmail, password request,
    i need to hack a facebook account
    i need to hack a email account
    i need to hack a yahoo, gmail, hotmail, aol account.
    I need to hack my wife fiancee boyfriend email.
    Hacking into somebody's email account.
    Email password hacking solution.

  62. i will try it now

  63. make? sure to check out Glen! They will hack any account & website for you - name it - from Google to Yahoo to Facebook.Just email & they'll give you access to any account you want. >> GLENPENK@YAHOO.COM <<

  64. for your hacking services ,please contact ihacc4u@yahoo.com.au
    this hacker can help you for any hack problem you might have
    from website hack to email hack
    do contact them

  65. Not working, never arrived my fake facebook message (to myself).

  66. i like spam john@rntcalls.com plz send me some!

  67. is it possible to send fake email by installing free mail servers. if yes pls make a tutorial on that..

  68. Try This , This is Working
    http://democraticprogrammers.com/fake_email_generator/

  69. thanku a lot...

  70. nice blog

Post a Comment