Skip to main content

Posts

Showing posts with the label SMTP Relay Phisher

SMTP_Relay_Phisher

  Overview SMTP Relay Phisher is a tool for testing and exploiting the SMTP Open Relay vulnerability by simulating real-world phishing attacks. This tool used for two purposes: To run the phishing campaign by command line To exploit the SMTP Open Relay vulnerability by sending phishing email This tool used custom SMTP-cli. I have done some basic modifications in his script. Thanks to  smtp-cli  for developing such a useful tool. Feature Overview Fully open-source means there are no limits on the use Lightweight as compared to other phishing toolkits Run multiple phishing campaigns simultaneously Send an email with embedded First Name, Last Name, and Email Highly flexible to run phishing campaign by exploiting SMTP open relay issue User enumeration by “RCPT TO” Time delay is available to bypass the open relay restriction Reason to Develop SMTP Relay Phisher Recently, I was working on a Red Team activity, where I found SMTP open relay vulnerability. I used “SMTP-cli” tool to run the phis