Fake mailing in ASP

                                -assassin007

 

Well before this I wrote an article “Anonymous mailing in ASP” that deals only with CDONTS component. Many users asked me about different email components. This article should answer all your questions. Here we go…

 

ASP is a powerful server-side scripting language. It has the capability to integrate with several email components. These email components enable to send email to any person from any email address. All these components except CDONTS require a mail server address to send an email. When you send an email to a person these components relay your mail via the mail server to their inbox.

 

But CDONTS doesn’t require any such mail server. This makes the mail sent through a server installed with CDONTS almost anonymous. Microsoft maintains a pick-up service all the time to receive such emails. When you send an email from a server with CDONTS installed, the Microsoft server picks up the mail from the server and delivers it to the recipient. Every such email picked up will be given a unique Message ID to identify the server from where the mail was picked up. So, your IP address will not be blocked any where during this process. Below are some of the typical email component scripts,

 

ASPMAIL component:

 

Set objNewMail = Server.CreateObject("SMTPsvg.Mailer")

objNewMail.FromName = strFromName

objNewMail.FromAddress = strSender

objNewMail.AddReplyTo = strSender

objNewMail.RemoteHost = strMailServer ‘ The mail server should be specified here

objNewMail.AddRecipient strRecipientsName, strRecipients

objNewMail.Subject = strSubject

objNewMail.BodyText = strMessage

SendOk = objNewMail.SendMail

 

ASPEMAIL component:

 

Set objNewMail = Server.CreateObject("Persits.MailSender")

objNewMail.FromName = strFromName

objNewMail.From = strSender

objNewMail.AddReplyTo strSender

objNewMail.Host = strMailServer ‘The mail server should be specified here

objNewMail.AddAddress strRecipients, strRecipientsName

objNewMail.Subject = strSubject

objNewMail.Body = strMessage

objNewMail.Send

 

Jmail component:

 

Set objNewMail = Server.CreateObject("Jmail.smtpmail")

objNewMail.ServerAddress = strMailServer ‘The mail server should be specified here

objNewMail.AddRecipient strRecipients

objNewMail.Sender = strSender

objNewMail.Subject = strSubject

objNewMail.body = strMessage

objNewMail.priority = 3

objNewMail.execute

 

SMTP component:

Set objNewMail = Server.CreateObject("SmtpMail.SmtpMail.1")

objNewMail.MailServer = strMailServer ‘The mail server should be specified here

objNewMail.Recipients = strRecipients

objNewMail.Sender = strSender

objNewMail.Subject = strSubject

objNewMail.Message = strMessage

objNewMail.SendMail2

 

CDONTS component:

Set objCDO = Server.CreateObject("CDONTS.NewMail")

objCDO.To = strRecipients")

objCDO.From = strSender

objCDO.Subject = strSubject

objCDO.Body = strMessage

objCDO.MailFormat = 1

objCDO.Send

 

 

Terms used*:

 

strMailServer= Mail server address

strRecipients = Recipient’s email address

strRecipientsname = Recipient’s name

strSender = Sender’s email address

strFromName =sender’s name

strSubject = Email subject

strMessage = Body of the email

 

*All the above are string variables

 

Below are the source codes of ASP pages which can be used for fake mailing from a server installed with CDONTS.

 

Mail.asp:

 

<html>

<head>

<title>

Anonymous mailing in ASP

</title>

</head>

<body>

<form method="POST" action="mailprocess.asp">

<p>  Mail to:<input type="text" name="rcpt" size="20"></p>

<p>Mail from:<input type="text" name="mailfrom" size="20"></p>

<p>Subject:<input type="text" name="subject" size="20"></p>

<p>Data:<textarea rows="5" name="data" cols="33">

</form>

</body>

</html>

 

Mailprocess.asp:

 

<%

Dim objCDO

Set objCDO = Server.CreateObject("CDONTS.NewMail")

objCDO.To = request.form("rcpt")

objCDO.From = request.form("mailfrom")

objCDO.Subject = request.form("subject")

objCDO.Body = request.form("data")

objCDO.MailFormat = 1

objCDO.Send

%>

 

The header of a mail I sent using the above codes. Note the header doesn’t specify anything about you.

 

X-Apparently-To:

krishnachaitanya_thota@yahoo.co.in via web8101.mail.in.yahoo.com; 16 Jul 2002 21:58:58 +0500 (IST)

Return-Path:

<billgates@microsoft.com>

Received:

from 216.223.16.243 (EHLO oregonsweb0.oregonsweb.com) (216.223.16.243) by mta102.in.mail.yahoo.com with SMTP; 16 Jul 2002 21:58:57 +0500 (IST)

Received:

from mail pickup service by oregonsweb0.oregonsweb.com with Microsoft SMTPSVC; Tue, 16 Jul 2002 09:34:04 -0700

From:

billgates@microsoft.com | Block Address  | Add to Address Book

To:

krishnachaitanya_thota@yahoo.co.in

Subject:

hello

Date:

Tue, 16 Jul 2002 09:34:04 -0700

X-MimeOLE:

Produced By Microsoft MimeOLE V5.00.2919.6700

Message-ID:

<OREGONSWEB08ARf3sll00000061@oregonsweb0.oregonsweb.com>

X-OriginalArrivalTime:

16 Jul 2002 16:34:04.0500 (UTC) FILETIME=[993FF140:01C22CE6]

Content-Length:

13

 

 

But the fact is that there are no free servers that supports for ASP and have any email component installed. Although Brinkster.com gives you free space, there is no email component installed for free service. So please don’t ask me for free servers and free mail server addresses.

 

Please send me your comments…..Happy hacking

 

Sincerely yours

assassin007

admin, http://www.hrvg.tk

assassin_007@rediffmail.com