acking.* Overclocking.* Ad and Spam Blocking.* Sendmail.* Phreaking.* Advanced Phreaking.* Phreaking II.* IRC Warfare.* Windows Registry.* Info Gathering.* Proxy/Wingate/SOCKS.* Offline Windows Security.* ICQ Security.* Hardware* Cracking, Part I.Sendmail? Huh?==============Sendmail is a daemon(1) which waits for connections on port(2) 25. It is used to send outgoing mail.For example: your Email provider (probably your ISP (Internet Service Provider)) probably uses two servers (unless it's a web-based mail account such as Hotmail.com):1) mail.boring-ISP.net (probably port 110): for incoming mail.2) mailgw.boring-ISP.net (port 25): for outgoing mail.Most of the time mail servers look pretty much like this, but the addresses vary from different ISPs.Mail.boring-ISP.net would require a username and a password so people won't be able to read your Emails, so let's skip this one (I might discuss cracking those passwords in another tutorial, but remember - I'm teaching you these things so you'll be able to know how malicious crackers work and not fall for their tricks, not for you to break the law and harm others). Now, as surprising as it may sound, mailgw.boring-ISP.net will not require a password or any other means of identification. If you telnet(19) into mailgw.boring-ISP.net on port 25 and type in the right commands you will be able to send fake mails. Interesting, huh?Now, the coolest part is that you can actually hack a server running Sendmail or at least bring it down, since Sendmail contains a crapload of bugs and security holes.How can I create authentically-looking fake mails?==================================================As mentioned in the previous chapter, sending mail does not require you to have an account on the machine you're sending the mail from (the mail server, not your computer). All you need to know is the IP Address(9) / Hostname(10) of the mail server and Sendmail commands.So far we assume that you know the IP/hos...
