Hello everybody and welcome back.
And in this video I will show you how you can actually send fake e-mails in order to for example send
our phishing links and some of the links you want to send to your target or basically send any of your
back doors files malware or whatever you want to deliver to the target from a fake email.
Now the most problematic thing while using these methods is that sometimes the e-mail can get into these
pen folder.
But using this method it should not finish up in the spam folder it should finish up as a normal important
message on any e-mail account.
Now sometimes this doesn't really work.
So for example in my case I believe like 50 percent 60 percent of e-mails actually get sent and received
from the Target and other 40 percent really don't.
So let us actually see what we will need in order to do this.
You will need a program send e-mail which actually comes pre installed in the clinics so you will not
have to install it.
Basically I think this program comes installed in all of the Linux systems so this should not be a problem
right now.
All we have to do is go to the Web site of this is basically called the Century Web site and right there
we will have to create an account which will allow us to actually send the e-mail over them.
Now this account will probably get deactivated since you will always specify from e-mail addresses since
basically they do not ask for the verification of the e-mail addresses in order to use this.
But the next day or basically in just a few hours you will not be able to use it since they will close
your account because within and verify also make sure to sometimes to specify the correct or not the
correct but or just let me show you.
Let us first go to the site itself.
I will explain it as they go to their SO SEND grid.
Just type in the in your Google search bar on your Firefox or wherever you want to and basically want
to go to their Web site and actually create or register on their account.
So just click on the first link which is some green dot com.
It takes a few seconds to load.
And as soon as it does we will see what our available options are.
So here you have their page right here some of the plans some of the things find the correct perfect
plan your needs and all this stuff we are not interested in what we want to go is we want to go to try
for free.
So click on your drive for free.
Right here and it will ask you probably to create an account.
So let's see what we get prompted with.
OK.
So we get printed with this.
Let's get started.
So user name password confirmed password and email address.
Now make sure to specify some of the normal things so others specify just user name admin.
One two three password can be anything you want so just type your password then it doesn't really matter
here make sure to change the user name is taken.
OK so we'll have to specify.
Let's just do it like this.
The good part is that you don't even need to remember your username and password.
You will not be needing it.
And also all you need to do is copy the key from that.
I will show you once we create our account that you will need in order to send email for e-mail address.
You can specify any e-mail address you want.
So basically it doesn't have to be yours.
It can be any e-mail address.
So I will just type here for example Yahoo.
At g mail dot com.
Now I only I'm not even sure if this e-mail exists.
So it says right here you'll need access to this e-mail address to verify your account which is correct.
That's why it will close your account in just a few hours but until they close it you will be able to
send fake e-mails.
So click here.
I'm not a robot.
Also click here.
I accept.
Basically I might get this.
So let's select some of these stairs OK.
Verify we verified.
I accept the terms and I just click here create the count.
It will lead us to the next page where it will ask us for our more detailed information.
So first name you can specify anything you want but I will just advise you to specify our real names
and real surnames real company names and everything else.
Because if you do not if you just have some random letters right here I believe they will not even activate
your account and you will not be able to use it.
So just play it safe here.
John last name
kind of anything else John.
John Cena it doesn't really matter so John Cena is our first and last name on a name Facebook phone
number is not required.
We can skip that company website Facebook dot com
developer.
How do you plan to send e-mail using our API.
It doesn't even matter.
Zero to One Hundred thousand.
How many employees work at your company.
One to 500.
Get started.
Now sometimes if you didn't specify the correct options right here it for said US it will ask for further
informations such as right here.
So please provide us with further information.
Your account has been created.
Welcome to the seventh grade.
We're happy to have you.
So it will ask you to provide more information which means you didn't create account successfully.
So I want to do right now is change some of the things so let's just type here.
Jake the e-mails.
DAWSON It doesn't really matter.
Facebook let's not use Facebook.
Let's use some Web site company websites.
It doesn't really matter where the the best thing you can get right here is not the message that they
wanted for their information.
See as a previous.
And right now we also got please provide further information.
But let's actually try to get once the account to be made without actually asking us to provide further
information.
So let's go to descend.
Great.
We'll try once again.
Basically if this doesn't work I will just show you the syntax for what the command you need to send
in order for this to actually work.
So let the score right here try for free user name the world 1 2 3
password.
Anything else.
Confirmed password.
So just type your anything for email use something like I don't know we'll add gmail dot com for example
doesn't even matter.
I'm not a robot crosswalks So K so we select that we verify we accept terms and let's see right now
if this will actually work so we'll specify no.
PHILIP.
Heidi.
Doesn't even matter.
Company name.
YouTube.
Company website YouTube.
Dot com.
What did my marketer using our API let's select some of the different options and 500 to 1000.
Let's click here on get started and hopefully right now they don't ask for further information so we
will see right here what we get prompted with and as you can see right here right now we didn't get
prompted to enter further information.
So this is something that you want to actually achieve.
If they ask you to for permit further information you need to try to make a count once again until you
actually log in and see something like this.
So it says welcome fillip even though our name is not Philip.
What you want to go with is integrate using our Web API.
So just click here on start on the first thing and you can choose between these two where we want to
actually choose the S&P really even though it says recommended right here we don't care about that.
So choose this right here as A.P. relay
and right now it will ask you to create an API key so just open up this page right here or this path
right here you can type your anything you want.
So just type your basically anything create key and it will create the key for you which will be just
a mixture of bunch of letters and numbers.
As we can see right here this is the code that you want to actually remember.
This is your password and this is your user name but the user name is same for everyone.
So right now in order for you to actually send the email you need to specify the user name and password.
Then you will be able to send the email from any email you want so let us see what syntax we need to
use in order to do this.
So just close that window or not close it just lower it so we can use our terminal and the actual command
that you need to run it.
Send email
then minus ask for the S.A.T. send grade.
So we want to use their sending so we can specify it right here with two dots.
This right here will be the port from which it is going to specify port 25.
But sometimes I don't get this port to work so it is specified 25 25.
I almost always get this port to actually work.
So this is the part of the command and minus X you for the user name which we saw E for everyone.
It is API key and then minus X key for the password.
Now your password is this thing.
So just copy this part right here.
So copying this right here let's lower this.
A lot of this space right here.
So paste it and then you specify minus F which is from who the email will be sent to.
So this is the e-mail that you actually spoof so you can specify any e-mail between double quotes so
make sure to open double quotes and let's use Google at gmail dot com which is not my email of course
and then minus t is the option to who are you sending the e-mail.
So this is your target's e-mail that you want to send for you.
So for example you can send that to I don't know you can send to anyone you want so anyone you want
at email dot com dot com and then there are also some of the optional things you want to add such as
the minus you for the I believe it is our header or something like that if you just type your kilo the
minus Sam is the message of the actual e-mail.
So here here you type the message and you can also use minus all options specify some of the additional
headers such for example message header message header equals and then you add double quotes from and
then the name for example John sign up and then basically specify the email from which you're sending
which is but Google at G.M. dot com.
So Google email dot com you close this and that will be about it.
So this is the entire command.
You have to specify.
So let's recap.
You send over this port minus X you is the your user name which is API key minus XP your password minus
f from who are you sending.
So this is the e-mail that you want to spoof and two minus t is to who are you sending.
So this is the target the e-mail of your target minus you is the I believe header of the email itself
or something like that minus M is the message of the e-mail.
And here we actually forgot to specify these double quotes at the end so message double quote and minus
always some of the additional headers so you can see you can just type your send email and then that
does help for the options that you can actually use to see if you send this right here.
Just press your enter wait for this to finish.
It says connection attack to S&P send sender Nat failed.
OK.
So of course it has failed since sender net can just click.
So it looks better since center up now doesn't really exist.
Not really sure why I type that when it specify the correct name so it is sent green dot net.
So here sent you great dot net.
So make sure to have as A.P. dot send great dot net then two dots and then specify the port.
So let's send once again.
And it says right here.
Email sent was sent successfully and you were able to send e-mail to your target from any e-mail you
wanted to spoof whether it's the e-mail or there some of some of their cousin or a friend or something
like that that you know that they're will for sure open and read.
And there you can send somebody files such as your back door your link to your back door or basically
anything else.
So that would be about it for this video.
This was the last video of our ethical hacking course that actually had the tutorial it is next to you
in the next video.
Basically I will talk about what you can do next.
What we learned and so on.
So I hope you enjoyed this course.
I hope you learn something new.
And don't forget that you need to practice all of this in order to get good at it.
You might be having problems with certain parts such as for example the coding section the website penetration
testing section divider second section or any other section.
Make sure to practice it a lot and it will all become pretty easy for you later on.
Hope you enjoyed this course and take care.
By.