Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 2 down vote favorite

I'm doing a credential harvesting attack using SET from backtrack. I want to sent a spoof email using an open relay server. However, any outbound connection for smtp is blocked by the firewall.

I want to know is it possible that using tor i can tunnel my traffic and go un-detected? If not possible with tor what others ways i can use to tunnel the traffic.

share|improve this question
You want to go undetected by whom: The target or your local firewall? If it is your firewall that is the concern, we need to know more about the situation. – schroeder Oct 3 '12 at 18:56
I need somehow to bypass the fw restriction for outbound 25 and connect using something as tor. I want to make direct connection with open relay server on the internet. – Saladin Oct 3 '12 at 19:01
@user970533 - You should go through the proper channels to do this. Trying to bypass firewall restrictions is a great way to be fired. – Ramhound Oct 5 '12 at 13:26
fired? I'm paid to do this:) – Saladin Oct 5 '12 at 19:12

2 Answers

up vote 2 down vote accepted

From the comments, you state that you cannot email at all. What you need is another piece to the puzzle: a forwarder. You need to tunnel your SMTP traffic through your local FW to a forwarder that will relay it to port 25 to the target.

All this is assuming that the target is receiving SMTP (port 25) and is not also using webmail ....

share|improve this answer
I can email but not using telnet as i can do sitting from home computer. Would tor not act as a tunnel.? – Saladin Oct 3 '12 at 19:14
1  
When you say 'email' do you mean SMTP or do you mean 'webmail'? – schroeder Oct 3 '12 at 19:15
2  
Then my post applies as-is. A tunnel is the least of your worries. You need an asset on the other side of your firewall to forward port 80 to port 25. – schroeder Oct 3 '12 at 19:21
1  
would opening a redirecter on my home pc and connect it using ssh tunnel from office pc would do the trick? – Saladin Oct 3 '12 at 19:23
1  
Now we are closer to something that will work. You have to worry about your office firewall, but you have the right idea. – schroeder Oct 3 '12 at 19:27
show 8 more comments
up vote 2 down vote

Whether or not you can send email with TOR depends on the exit policy of whatever exit node you end up using. Almost invariably outgoing TCP 25 is blocked by tor exit nodes because of spammers.

More importantly, most email providers are using the Sender Policy Framework which can be used to detect forged email. Welcome to 2012 where most stupid hacks are prevented by simple security systems.

There is nothing magical about sending spoofed email, and you can do it with telnet or netcat, you just need to be able to access your victim's SMTP server on port 25 and deliver the forged email directly. You should be able to find a socks proxy server that can do this.

share|improve this answer
thanks for the update. I guess you read too much into the text. I got 0 problem in sending fake / spoof email to abc organization. I can do this as long as there is no filtering device e.g firewall between me and internet. Sender policy framework or anything similar has not been configured on the target mail server. I cannot do it with telnet as it makes an connection through the fw which is blocked? thus is my reason to write this post. What particularly i asked if i can use SET with tor? Thanks for the sender policy framework. Nice reading. Talking about magic you got no idea what SET can do – Saladin Oct 3 '12 at 18:25
@user970533 Yes, I have answered your question. – Rook Oct 3 '12 at 18:55
If you can email, then you can telnet to the email port .... Your question goes in several directions at once, so do not be surprised if responses are not what you expected. – schroeder Oct 3 '12 at 18:55
2  
@user970533 Then, you cannot email; you can surf. That's an important piece of information. You need to tunnel through port 80 to a relay outside that will forward to the email port. – schroeder Oct 3 '12 at 19:07
1  
@user970533 Scanning from the outside will not help you. You will only learn the inbound firewall rules. You want to know the outbound rules. TOR will not help you - you need something to swap the ports. – schroeder Oct 3 '12 at 19:14
show 8 more comments

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.