chenjj / espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

Home Page:https://www.jianjunchen.com/p/composition-kills.USESEC20.pdf

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Some problems with client_mode and server_mode

craudilho1199 opened this issue · comments

Hi bro! I need help a bit.
I tried to run espoofer in client mode, but it didn't work. A screenshot of the error from the terminal is attached.

help___github_____________________--
nastroiki_config

Also I tried to run in server mode but I failed. I don't know where to enter the following commands:

  1. Domain configuration

Set DKIM public key for attack.com

selector._domainkey.attacker.com TXT "v=DKIM1; k=rsa; t=y; p=MIGfMA0GCSqG...
2) Set SPF record for attack.com

attack.com TXT "v=spf1 ip4:1.2.3.4 +all"

Thanks for opening this issue.

For the first question (client mode), I suggest changing the sending_sever option from 465 to 587.

For the second question (server mode), you need to have a domain and configure the TXT record in your domain provider.

Thanks for opening this issue.

For the first question (client mode), I suggest changing the sending_sever option from 465 to 587.

For the second question (server mode), you need to have a domain and configure the TXT record in your domain provider.

Hi!
I changed today sending_sever option from 465 to 587
Here's what's going on:
sadsadsadsadsadsad___________

The login and password for my mail are correct, I checked it several times, went to the mail several times
I waited more than 15 minutes, the letter never arrived, what could be the problem?
Btw The same if you enter the following value: sudo python3 espoofer.py -m c -id client_a3

Best regards!

You could try the following steps to switch a different authentication protocol:

  1. Run git pull to get the latest code. I pushed some new changes today.
  2. Add "auth_proto": "PLAIN" to the client_mode option, like this:
"client_mode": {
    "sending_server": ("smtp.gmail.com", 587),
    "username": b"",
    "password": b"",
    "auth_proto": "PLAIN",
}
  1. Run the tool again

Good day, I would like to immediately apologize for the stupid questions and for taking up your time, did everything as you said above, tried to use another mail service, but this time the following error appeared:
AHHAHAHAHHAHAHHA_________1
AHAHAHHAHAH__________2

code in config.py:
AHAHHAHA_config_py_______________

I hope for your help)

Best regards!

If you're sure that your username/password is correct, you may try to remove the auth_protooption and try again.

If it still doesn't work, there could be two possibilities:

  1. Some email services don't allow SMTP sending via third-party clients by default. You may want to enable this in the email provider manually.
  2. Some email services require application-specific passwords for third-party clients. You may want to configure this in the email provider. For example, Gmail has this page (https://support.google.com/mail/answer/7126229?hl=en#zippy=%2Ci-cant-sign-in-to-my-email-client).

The same idea could apply to other email services.

Hello again, thanks for your previous answer, it helped me, but the following error appeared:
OPROOOOOO211213221___________________3

Do I need to somehow convert Cyrillic to ASCII?
I tried to do this but nothing worked, I am an absolute zero in coding, I googled a lot, but I could not solve this problem (
I would be very grateful to you for solving this problem, once again sorry for distracting you

Probably you could use subject_header: bytes("Subject: Cyrillic characters\r\n", 'utf-8').

I have already tired you with my stupid questions and requests.
Thank you for the answer you gave above, I managed to solve my problem about which I informed you earlier,
But now I have another problem, I need to insert a picture into the body of the letter, and not attach it to attachments to the letter.
You also need to align the text with this picture in the center of the letter.
It is very uncomfortable for me to ask for help every time and cause inconvenience to you.
I'm trying to get better and start to understand some of the points in the coding.

I've tried looking for information here: https://stackoverflow.com/questions/1970807/center-middle-align-text-with-pil
And here: https://www.tutorialspoint.com/working-with-images-in-python
And here: https://stackoverflow.com/questions/35782680/embed-image-in-body-of-the-email-in-python

The email body display may vary in different email clients. I'm not familiar with this.