X-Mail

By: JesterS
( Copyright© 2000 JesterS™ Productions)

WOW! I am on the internet, first cops now this! ... I was smoking
a blunt when this bitch pig pulls me over; "son, wacha smoken there?"
he said. "Some kick ass shit" I replied. He slowly pulled out his club,
It was then that I felt a beat down coming on...but that's another story.

I am glad to be writing my second article for Hack In The Box.
My last article "The art of IRC" was in my eyes so damn lame, that I
felt ashamed to have written it. So I felt that I had to do ten times
better this article than the last, so I coded my own program. I called
it "X-Mail" X standing for extreme. This program is very simple, it uses
the power of a wingate to hide your ip from the recipient of the email.
How does it work?

User--->Wingate--->SMTP Sending--->POP receiving--->Victim

You can download my program here, http://JesterS.cjb.net. This
article will guide you step by step through the process of sending an
email.

Step 1) Finding a wingate and SMTP server.

When you download the program it has a text document called "wingate.txt"
which has over 200 wingate ip's. (Thanks again, Cyberarmy.com) This is
where you can find a wingate ip. In X-Mail 3.0 I did not include a wingate
tester, but I will include it in the next upgrade.

To test your wingate you can use telnet, or the X-Mail program.
If you're using telnet, connect to the wingate ip via port 23. If it connects
and says "Wingate>" then it works. Watch to see if it says, "Login:"
if it does find another wingate. If you're using the X-Mail Program, enter
the wingate ip in the selected text box, then click the button, "wingate
connect". When it connects and is valid a msg will pop up, "Wingate Connection".
You MUST read the status to see if it said, "Login:" if it does then
use another wingate. (PS: Most wingates do NOT use a login/password,
so don't worry!)

SMTP, (Simple Mail Transfer Protocol). You need to find a SMTP
server that will allow you to relay. If you noticed, SMTP servers do
not use Login/Password. Can anyone use any SMTP server
then? Yes. The SMTP server recognizes your ip. If your ip is the same
as your it will allow you access. (PS: I may be wrong, but the only SMTP
servers I have dealt with are ISP SMTP servers.) [editor's note: use of a SMTP server is dictated by the properties of that server. The server I administer is set up to allow anonymous login and mail relay, however, most servers are set up to challenge users by checking their IP address against a list of allowed addresses. Even when this is not the case mail relay is rarely left on, and even when it is relay is usually only allowed to certain domains (local being the default on most servers)] When you have a wingate
ip, it is very easy to get a SMTP server.

Example;

"24.112.1.71" = cr975799-a.ym1.on.wave.home.com
"24.2.9.40" = "mail.ym1.on.wave.home.com

It is not hard to find a ISP SMTP server because you take their isp and
add "mail" in front of it. Now the SMTP will allow you to relay, because
the wingate has the same IP as them.

2) Entering Information:

Add in all information into the text boxes; to, from, subject, msg, and
wingate. When filling out the "to" and "from" addresses you can put anything
you want. Make sure the "to" address is valid or NO ONE will get the
EMAIL!!! I sent the following email:

--Sample Message!

To: HackX@onebox.com (My own Email)
From: BillGates@Micro$oft.com (I lied, I didn't use $)

Subject: Hi, I suck linux cock!

Msg:
Hey man this is Bill.

Someone asked me to taste the linux flavour, you know linux cock
doesn't taste that bad. Maybe I'll invent Microsoft Windows X, I am one
cheap mother fucker. Peace for now man.

-Bill

Ps: I can't seem to find your so called, "weed" I tried Lycos but nothing
came up?

--End Sample Message!

When you have filled out all the information, then press the
button "wingate connect" button when a msg pop's up saying you have wingate
connection click the "send" button. A msg will pop up and say the email
has been sent. You might not get a message because there are so many
different versions of SMTP servers that I couldn't get a lock to confirm
when it is sent. Read the status if it says, "Ok message" or "354 sent"
then it was sent. In the status it will say "Need Mail before RCPT" and
then a whole bunch of commands unrecognised, ignore it. It says all sorts
of weird stuff, but it works.
Try sending an email to yourself, you'll see it works.

I know what your saying, this is nothing new, this is so damn old, etc.
Shut the fuck up, no one has ever used a wingate email system before.
This is better than anonymous email because you can fake who you send
it from and then they can't find you because the ip it is sent from is
a wingate and not yours.

That about raps it up, if you need more help or got questions.. etc,
email me.

-JesterS
(HackX@onebox.com)

[editor's note: for more info on fake mail, check out L33tdawg's article in issue #1.]

1.) Are you a hacker? - JesterS

2.)X-Mail - JesterS

3.)Getting Under the GUI - Liquid Sphear

4.)Opening Simple Ports on Win X - madirish

5.)Commentary on Napster and the Digital Age -
SiLeRePrAeSes

6.)Commentary on the Political Aspects of the Internet
-
SiLeRePrAeSes

7.)How to (re)build your kernel
- L33tdawg

8.)A 101 Bytez team article for Hackinthebox mag

- OZONE

9.)Examining PE Files - abrams!metaray