Advanced Email Spoofing Demonstration

This repository contains Python scripts that demonstrate how email spoofing works for educational purposes only. Email spoofing is a technique used to forge email headers so that messages appear to originate from someone other than the actual sender.

⚠️ Disclaimer

This tool is meant for educational purposes only. Using this tool to send deceptive emails without consent is:

Illegal in most jurisdictions
Unethical
May violate terms of service for email providers
Could result in your IP/account being blacklisted

The author assumes no responsibility for any misuse of this information or script.

Features

Basic email spoofing with custom From header
Advanced header manipulation
Custom X-header generation
Support for multiple recipients (To, CC, BCC)
File attachments
Reply-To address customization
HTML email templates
Debug mode for troubleshooting
Bulk testing of SMTP servers from a file
Multi-threaded SMTP server testing
Colorized console output

Requirements

Python 3.6 or later
Required Python packages:
- colorama
Access to an SMTP server (most email providers will require authentication)
SMTP server that allows header manipulation (many public email services now block this)

Installation

git clone https://github.com/Triotion/email-spoofing.git
cd email-spoofing
pip install colorama

Basic Usage

python email_spoofer.py --server smtp.example.com --port 587 --user [email protected] --password your_password --from-name "Spoofed Name" --from-email [email protected] --to [email protected] --subject "Test Subject" --message "<h1>This is a test</h1><p>This email demonstrates spoofing.</p>"

Using SMTP Server File

You can provide multiple SMTP servers in a file and the script will test them all to find working ones:

python advanced_email_spoofer.py --smtp-file smtp_servers.txt --from-name "Spoofed Name" --from-email [email protected] --to [email protected] --subject "Test Subject" --message "This is a test message"

The SMTP server file format is simple:

host|port|username|password

For example:

smtp.example.com|587|[email protected]|password123
smtp.another.com|465|[email protected]|securepass

Advanced SMTP Testing

You can test which SMTP servers are working without sending emails:

python advanced_email_spoofer.py --smtp-file smtp_servers.txt --test-only --threads 10

This will:

Test all SMTP servers in the file
Use 10 threads to speed up the testing process
Show which servers are working
Exit without sending any emails

Command Line Arguments

SMTP Settings:

--server: SMTP server address
--port: SMTP server port (default: 587)
--user: SMTP username (typically your real email)
--password: SMTP password
--smtp-file: File containing SMTP credentials in format "host|port|username|password"
--test-only: Only test SMTP servers, don't send emails
--threads: Number of threads for testing SMTP servers (default: 5)
--debug: SMTP debug level (0-2)

Spoofing Parameters:

--from-name: Display name you want to show as the sender
--from-email: Email address you want to show as the sender
--reply-to: Reply-to email address
--to: Recipient email(s), comma separated
--cc: CC recipient(s), comma separated
--bcc: BCC recipient(s), comma separated
--subject: Email subject
--message: Email body content (HTML supported)
--plain-text: Send as plain text instead of HTML
--attach: File(s) to attach (can be used multiple times)
--add-xheaders: Add fake X-headers to make email look more legitimate
--custom-header: Add custom header in format "Header:Value" (can be used multiple times)

Usage Examples

Basic Email Spoofing

Example 1: Basic spoofed email

python email_spoofer.py \
  --server smtp.example.com \
  --port 587 \
  --user [email protected] \
  --password your_password \
  --from-name "John Smith" \
  --from-email [email protected] \
  --to [email protected] \
  --subject "Urgent: Action Required" \
  --message "Please review the attached document and respond ASAP."

Example 2: Using HTML content

python email_spoofer.py \
  --server smtp.example.com \
  --port 587 \
  --user [email protected] \
  --password your_password \
  --from-name "IT Department" \
  --from-email [email protected] \
  --to [email protected] \
  --subject "Password Reset Required" \
  --message "<h2>Security Alert</h2><p>Your password needs to be reset. <a href='https://example.com'>Click here</a> to reset.</p>"