Telnet Lessons – Part 3

Telnet Lessons – Part 3

Carolyn’s note: <CRLF> just means hit return. In case you can’t see that little
period between the <CRLF>s, what you do to end composing your email is to hit enter,
type a period, then hit enter again. Anyhow, try typing:

This is a test.
.
250 Requested mail action okay, completed
quit
221 <techbroker.com> Service closing transmission channel

Connection to host lost.

Using techbroker’s mail server, even if you enable full headers, the message we just composed looks like:

Status: R
X-status: N

This is a test.

That’s a pretty pathetic forged email, huh? No “from”, no date. However,
you can make your headers better by using a trick with the data command. After you give it,
you can insert as many headers as you choose. The trick is easier to show than explain:

220 <techbroker.com> Service ready
helo santa@northpole.org
250 <techbroker.com> host ready
mail from:santa@northpole.com
250 Requested mail action okay, completed
rcpt to:cmeinel@techbroker.com
250 Requested mail action okay, completed
data
354 Start main input; end with <CRLF>.<CRLF>
from:santa@deer.northpole.org
Date: Mon, 21 Oct 2002 10:09:16 -0500
Subject: Rudolf
This is a Santa test.
.
250 Requested mail action okay, completed
quit
221 <techbroker.com> Service closing transmission channel
Connection to host lost.

The message then looks like:

from:santa@deer.northpole.org
Date: Mon, 21 Oct 2002 10:09:16 -0500
Subject: Rudolf
This is a Santa test.

The trick is to start each line you want in the headers with one word followed by a colon,
and the a line followed by “return”. As soon as you write a line that doesn’t begin this way,
the rest of what you type goes into the body of the email.

Notice that the santa@northpole.com from the “mail from:” command didn’t show up in the header.
Some mail servers would show both “from” addresses.

You can forge email on techbroker.com within one strict limitation. Your email has to go to someone at techbroker.com.
If you can find any way to send email to someone outside techbroker, let us know,
because you will have broken our security, muhahaha! Don’t worry, you have my permission.

Next, you can read the email you forge on techbroker.com via telnet:

C:>telnet techbroker.com 110

+OK <30961.5910984301@techbroker.com> service ready

Give this command:
user xyz
+OK user is known

Then type in this:
pass test
+OK mail drop has 2 message(s)

retr 1
+OK message follows
This is a test.

If you want to know all possible commands, give this command:

help
+OK help list follows
USER user
PASS password
STAT
LIST [message]
RETR message
DELE message
NOOP
RSET
QUIT
APOP user md5
TOP message lines
UIDL [message]
HELP

Unless you use a weird online provider like AOL, you can use these same tricks to send and receive your own email.
Or you can forge email to a friend by telnetting to his or her online provider’s email sending computer(s).
With most online providers you need to get the exact name of their email computer(s).
Often it is simply mail.targetcomputer.com (substitute the name of the online provider for targetcomputer).
If this doesn’t work, you can find out the name of their email server with the DOS nslookup program,
which only runs from cmd.exe. Here’s an example:

C: >nslookup
Default Server: DNS1.wurld.net
Address: 206.61.52.11

> set q=mx
> dimensional.com
Server: DNS1.wurld.net
Address: 206.61.52.11

How To Telnet Lessons Series:

1 thought on “Telnet Lessons – Part 3”

  1. i will like to learn the art of hacking from you and also be ur friend.

    will u be pleased by this? please add me to ur yahoo messanger.

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.