Fake email attack, see how I send spam "two" to NetEase Mail app

Duang~~~ for a long time not updated blog, from the recent relatively busy, thanks Bo friends to my support ha ~ Today continue to update

The following is the entry for the vulnerability that I submitted on the Patch-day vulnerability platform.

NetEase mailbox domestic users a lot. Today saw his home app, 99.95% spam capture, below I built a local SMTP server, to test, haha ~

I. Setting up the SMTP server there is not much to say, Baidu,google can go to search.

650) this.width=650; "title=" 1.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/6C/B7/ Wkiol1vrv6zdctglaakerd38uka402.jpg "alt=" Wkiol1vrv6zdctglaakerd38uka402.jpg "/>

Two. Below is the method (command line) for sending mail under Cmdshell.

650) this.width=650; "title=" 2.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/6C/BD/ Wkiom1vrvjkzzcmaaad89ekzgce119.jpg "alt=" Wkiom1vrvjkzzcmaaad89ekzgce119.jpg "/>

Three. Then we see a message waiting to be sent on the local SMTP server, click the button to send. See below, is OK.

650) this.width=650; "title=" 3.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/6C/B7/ Wkiol1vrv6yxgofpaajuuvli_ok265.jpg "alt=" Wkiol1vrv6yxgofpaajuuvli_ok265.jpg "/>

Four. Also look at the 126 163 Mailbox SPF record must be set.

650) this.width=650; "title=" 4.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/6C/BD/ Wkiom1vrvjkwv3soaahfeaatvrs055.jpg "alt=" Wkiom1vrvjkwv3soaahfeaatvrs055.jpg "/>

650) this.width=650; "title=" 5.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/6C/B7/ Wkiol1vrv63hi4emaahnnkrdllg172.jpg "alt=" Wkiol1vrv63hi4emaahnnkrdllg172.jpg "/>

Five. We enter the NetEase mailbox to see, normal reception, interested students can test the QQ mailbox, in this way forged spam messages will be filtered out.

650) this.width=650; "title=" 7.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/6C/B7/ Wkiol1vrv66hjbataag5whjg7um732.jpg "alt=" Wkiol1vrv66hjbataag5whjg7um732.jpg "/>

Six. At the same time we installed the latest version of the NetEase mailbox Master app, see the bundled QQ mailbox identification of spam messages.

650) this.width=650; "title=" 1.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/6C/B8/ Wkiol1vrwfhdwxggaaelwr1lotc796.jpg "alt=" Wkiol1vrwfhdwxggaaelwr1lotc796.jpg "/>

However, NetEase's mailbox is not recognized.

650) this.width=650; "title=" 2.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/6C/BD/ Wkiom1vrwhjxqferaadjcm4m0ze509.jpg "alt=" Wkiom1vrwhjxqferaadjcm4m0ze509.jpg "/>

Seven. Finally summed up, this is not to say NetEase mailbox how bad, just do a test. Moreover, it is difficult to make a trade-off between user experience and filtering level.

This article is from the "0X33CCFF" blog, make sure to keep this source http://zerosecurity.blog.51cto.com/9913090/1650461

Fake email attack, see how I send spam "two" to NetEase Mail app