chenjj / espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

Home Page:https://www.jianjunchen.com/p/composition-kills.USESEC20.pdf

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

How to change postmaster in the spoofed email address in client_a12

prajwal0909 opened this issue · comments

Hello last request I am able to spoof emails I am using smtp-relay.gmail.com and when I use the tool in client mode a12 the email is received by victim but the victim receives the email from postmaster@prajwalextensionsoftware.42web.io but it should be instagram@gmail.com in above address I want to change postmaster. The above domain prajwalextensionsoftware.42web.io is mine but I want to send the spoofed email from instagram@gmail.com to the victim deepalipandit82@gmail.com. please help I don't think anybody can help please I have asked all to help but no one is helping please help me to change the postmaster word.
One more important note you may think how it is client_a12 so I have changed the word server to client in the testcases.py

Hi, I'm not sure if Gmail is still vulnerable to client_a12, as they may have fixed those two cases. But the general idea of exploiting inconsistencies between different email components is hard to fix.

Espoofer is a security testing tool. Just like other security testing tools, it cannot guarantee that you can always find vulnerabilities in your targets.