Did I Execute Mass Mail Attack To The Gmail or not?

powerexploit

powerexploit

Posted on October 28, 2019

Did I Execute Mass Mail Attack To The Gmail or not?

"Python is just not a scripting language but it is one of dangerous tool which helps us to execute pen testing tasks."

The Beginning:

There was a time when I didn't know about the thing gmail or how to create a gmail account & how to send mail using such type of mailing services,Yeh! it sound to much awkward but I am talking about a lot of year ago. There was my friend in school who told me about such type of mail services basic understanding about how to create & send mail from gmail,I was happy.
Alt Text

The Research:

Then after lot of year being computer geek I tried to understand the basic concept of mail servcies that how they works on web.So what I learned? Gmail or any other services basically works on smtp service & the protocol used behind these mailing action is smtp or Simple Mail Transfer Protocol with port no : 25 but for gmail is usuaully works on 587 port.And A bit of research and I found out the dangerous fact of SMTP infrastructure.You have to basically setup smtp server to send mails.
Alt Text
note : Yeh! there is another one protocol imap but it can read the mails and does not work as same as smtp because it doesn't provide send method.

Mass Mail To The Gmail Working Or Not:

So after understanding the smtp server concept,I thought let's try to set up the smtp server in programming way.Because I was working one of my favourite scripting language python, So I decided to use python module smtplib.SMTPLIB provides amazing functions to connect smtp server,so firstly created a simple script just to connect & login server only for gmail.

import smtplib
import getpass
smtpobj = smtplib.SMTP('smtp.gmail.com',587)
my_email = input("What is  your gmail?:")
my_passw = getpass.getpass("Enter the password:")
smtpobj.starttls() 
#This step enables encryption(TLS Encryption) for your connection.
smtpobj.login(my_email,my_passw)
#this will help user to logged in gmail account
Enter fullscreen mode Exit fullscreen mode
wow! the above script was working amazingly now it was very simple to connect smtp server for me and login to gmail account.Then after this one geeky thing came into my mind let's try to send multiple mail to a particular gmail address like mass mail.

Let's begin the fun

So I created a fully automated script/tool to send 100 mails to the receiver or recipient.Bravo! It was working very amazing helping me to send 100 mails or mass mail other one gmail.I have also uploaded this script into my gist .

But the problem I was having that it was working only for 100 mails & surely this is not full mass mail attack to gmail,So to get rid I decided to create this as a open source project name as MailBomber,Now I am working with some open source contributor to get rid this problem & trying to build one of the super amazing tool for pentester.
This article is designed to express my experience about how mass mail attack can be done using python & If their is any python lover want to collaborate with me this super amazing project can contribute your codes in below given project.

GitHub logo powerexploit / MailBomber

Osint Mass Mail 😎 Attack tool.

MaiBomber - Mass Mail Attack tool

MailBomber is one of the easiest & simple tool in python which basically works on mass mail attack to send multiple mails to victim.It is inspired by Mass mail attack vector in kali linux Setoolkit(Social engineering tool).It is designed with smtplib library. Alt Text

Vision

print("Just to contribute & help hacking community")

print("Helps to understand the power of python")

Alt Text Alt Text

Contribution

If you want to contribute to this super amazing tool , So You can contribute in following ways:

  • Report bugs
  • Add some code
  • Give suggestions to make it better
  • Fix issues & submit a pull request





Thanks for visiting my blog please keep follow me on twitter , github, linkedin
💖 💪 🙅 🚩
powerexploit
powerexploit

Posted on October 28, 2019

Join Our Newsletter. No Spam, Only the good stuff.

Sign up to receive the latest update from our blog.

Related