ARTICLE: Email Addresses Spoofing !!!Contributed by: G3nu1n3, at 5/06/2005 05:48:00 PM.

Email spoofing is the practice of changing your name in email so that it looks like the email came from somewhere or someone else.

Spoofing is generally used by spammers as a first defense against people finding out who they are. It's also used by general malcontents to practice mischievous and malicious behavior.

Spoofing can be a legitimate and helpful tool for someone with more than one email account. For instance, you have an account, yourname@isp.net, but you want all replies to go to yourname@somebiz.com. You can spoof yourself so that all the mail sent from the isp.net account looks like it came from your purplemonkeys.com account. If anyone replies to your email, the reply would be sent to yourname@somebiz.com.

This is also helpful if you temporarily use a Web-based email account but want the replies to go to your regular email address.

Remember that spoofing anyone but yourself is absolutely and undeniably illegal. You should not ever spoof anyone else, not even in fun.

Spoof Email Addresses.

To show you how easy it is to spoof email addresses here is one way of doing it.

For this to work you are going to need to download FreeSMTP

Here are the steps:

• Install FreeSMTP and then make sure it’s running while you do this.
  
• Go to start, run, and then type in cmd
  
• Press enter
  
• Once the command prompt is open, type in telnet 127.0.0.1 25
  
• Press enter
  
• Once telnet has connected, type in helo
  
• Press enter
  
• Now type in mail from: the spoofed email address where “the spoofed email address” is the address you want the email to say its from
  
• Press enter
  
• Next type in rcpt to: the recievers address where “the recievers address” is where you are sending this email to
  
• Press enter
  
• Now type in data
  
• Press enter
  
• Now type in subject: your subject where “your subject” is the subject line of the email
  
• Press enter
  
• to:recievers address
  
• Press enter
  
• from:spoofed email address
  
• Press enter
  
• Now type in the body of your email
  
• After this press enter
  
• Now type . and once the command prompt has responded type in quit

Screenshot :



Download:: FreeSMTP

Email Anti-Spoof Measures

There is really no way to prevent receiving a spoofed email. If you get a message that is outrageously insulting, asks for something highly confidential, or just plain doesn't make any sense, then you may want to find out if it is really from the person it says it's from. You can look at the Internet Headers information to see where the email actually originated.

Remember that although your email address may have been spoofed this does not mean that the spoofer has gained access to your mailbox.

Displaying Internet Headers Information

An email collects information from each of the computers it passes through on the way to the recipient, and this is stored in the email's Internet Headers.

1. With the Outlook Inbox displayed, right-click on the message and click on the Options command to display the Message Options dialog box.



Internet Headers are best read from the bottom up, as they are added to as the email passes through the system.

2. Scroll to the bottom of the information in the Internet Headers box, then scroll slowly upwards to read the information about the email’s origin.

The most important information follows the “Return-path:” and the “Reply-to:” fields. If these are different, the email is not who it says it’s from.

Click here for a full explanation of the mail header.


Credits:1 , 2