"Python is just not a scripting language but it is one of dangerous tool which helps us to execute pen testing tasks."
There was a time when I didn't know about the thing gmail or how to create a gmail account & how to send mail using such type of mailing services,Yeh! it sound to much awkward but I am talking about a lot of year ago. There was my friend in school who told me about such type of mail services basic understanding about how to create & send mail from gmail,I was happy.
Then after lot of year being computer geek I tried to understand the basic concept of mail servcies that how they works on web.So what I learned? Gmail or any other services basically works on smtp service & the protocol used behind these mailing action is smtp or Simple Mail Transfer Protocol with port no : 25 but for gmail is usuaully works on 587 port.And A bit of research and I found out the dangerous fact of SMTP infrastructure.You have to basically setup smtp server to send mails.
note : Yeh! there is another one protocol imap but it can read the mails and does not work as same as smtp because it doesn't provide send method.
So after understanding the smtp server concept,I thought let's try to set up the smtp server in programming way.Because I was working one of my favourite scripting language python, So I decided to use python module smtplib.SMTPLIB provides amazing functions to connect smtp server,so firstly created a simple script just to connect & login server only for gmail.
import smtplib import getpass smtpobj = smtplib.SMTP('smtp.gmail.com',587) my_email = input("What is your gmail?:") my_passw = getpass.getpass("Enter the password:") smtpobj.starttls() #This step enables encryption(TLS Encryption) for your connection. smtpobj.login(my_email,my_passw) #this will help user to logged in gmail account
Let's begin the fun
So I created a fully automated script/tool to send 100 mails to the receiver or recipient.Bravo! It was working very amazing helping me to send 100 mails or mass mail other one gmail.I have also uploaded this script into my gist .
But the problem I was having that it was working only for 100 mails & surely this is not full mass mail attack to gmail,So to get rid I decided to create this as a open source project name as MailBomber,Now I am working with some open source contributor to get rid this problem & trying to build one of the super amazing tool for pentester.
This article is designed to express my experience about how mass mail attack can be done using python & If their is any python lover want to collaborate with me this super amazing project can contribute your codes in below given project.
MaiBomber - Mass Mail Attack tool
MailBomber is one of the easiest & simple tool in python which basically works on mass mail attack to send multiple mails to victim.It is inspired by Mass mail attack vector in kali linux Setoolkit(Social engineering tool).It is designed with smtplib library.
print("Just to contribute & help hacking community")
print("Helps to understand the power of python")
If you want to contribute to this super amazing tool , So You can contribute in following ways:
- Report bugs
- Add some code
- Give suggestions to make it better
- Fix issues & submit a pull request
Thanks for visiting my blog please keep follow me on twitter , github, linkedin