Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Ways to improve page rank, or deceptively get more users to your websites or away from your competition. Where you can discuss SEO (search engine optimization) issues as it relates to computer security. 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
Spoofing mail with Gmail?
Posted by: Anonymous User
Date: November 01, 2007 08:53PM

Mail headers:

Return-Path: hax0r@gmail.com
From: "hax0r" <hax0r@gmail.com>
To: spoof@mail.com
Received: by smtp.google.com with SMTP id xxxyyy for <user@mail.com>

Note that email actually arrived to "user@mail.com" and not to "spoof@mail.com". Anybody heard about some mad Gmail spoof-ninjutsu tricks? I tried few things like creating contact with name "spoof@mail.com" and primary email "user@mail.com", but does not work. Both addresses are displayed in headers:

To: spoof@mail.com <user@mail.com>

Any ideas?

Options: ReplyQuote
Re: Spoofing mail with Gmail?
Posted by: rsnake
Date: November 11, 2007 02:03PM

Maybe there's some open relay somewhere inside Google. Given the size of their network it's not impossible. It would probably help if you had all the headers.

- RSnake
Gotta love it. http://ha.ckers.org

Options: ReplyQuote
Re: Spoofing mail with Gmail?
Posted by: Bullet
Date: February 01, 2010 12:21AM

For Spoofing email addresses, you can use Social Networks "password reset" pages.

More details on the attack:

Edited 1 time(s). Last edit at 02/01/2010 12:46AM by Bullet.

Options: ReplyQuote
Re: Spoofing mail with Gmail?
Posted by: rvdh
Date: February 14, 2010 06:26PM

There is a relay which allows sending mail in Google's name. Wrote about it some time ago. It's a "tell-a-friend" form on Google.

Options: ReplyQuote

Sorry, only registered users may post in this forum.