Mail Server Attack
by Explicit
NOTICE: TO ALL CONCERNED Certain text files and messages contained on this site deal with activities and devices which would be in violation of various Federal, State, and local laws if actually carried out or constructed. The webmasters of this site do not advocate the breaking of any law. Our text files and message bases are for informational purposes only. We recommend that you contact your local law enforcement officials before undertaking any project based upon any information obtained from this or any other web site. We do not guarantee that any of the information contained on this system is correct, workable, or factual. We are not responsible for, nor do we assume any liability for, damages resulting from the use of any information on this site.
This is a little theory i have devloped and started to test but never followed through with attacking e-mail servers.
I am sure everyone has probably sent an email to some one at one time but typed the address wrong and got a reply email from [email protected]. If you reply and somewhere in the email it says not to reply to this email because it is a generated email blah blah blah. If you reply to it you get another one of those stupid emails saying that the mail can't be delivered.
After I noticed this it got me thinking what if [email protected] tried to email lets say [email protected]. In theory every time that 1 sends an email to 2 then 2 will reply to 1 with an error message and then 1 will reply to 2 with an error message. If this theory is right then if you can some how send several thousand emails from 1 to 2 then they will be bouncing the trafic back and forth.
When testing this idea i used a an email bombing program and made the to address [email protected] and the to addy was [email protected] or some bsb website. I then proceeded to run the program so it sent several thousand emails. After I did the attack I logged in to a pre created bsb account and sent an email and the time it took to send was much longer than before the attack.
I just thought i would throw the idea out there for anyone who is interested. One other note if you want to mailbomb some one at aol.com but dont know their mailserer i have found that the mail server is usualy the persons ip address. but if you are 2 lazy to find that out just mail bomb a non-existing account at hotmail.com and their sever is mail.hotmail.com from the persons aol name and they will get lots of replies.
|
