Tags: misc 

Rating:

# Onboarding Checklist

We need to send an email address to [email protected] We have a message that was sent from [email protected] to [email protected] The message said that [email protected] is expecting an email from [email protected] This is a classic email spoofing problem. We need to send an email spoofing as [email protected], even though we don't have access to this account.

While we could set up our own SMTP server to accomplish this, I'm instead going to be using Shubham Badal's [email-spoofer](https://github.com/ShubhamBadal/email-spoofer) [tool](https://shubhambadal.github.io/email-spoofer/). I'm also going to set up a disposable, temporary email address at [grr.la](https://www.guerrillamail.com) to receive an email from [email protected]

![](https://raw.githubusercontent.com/shawnduong/ctf-writeups/master/2019-TAMU/images/Onboarding-Checklist-1.png)

Now we just wait for the message to arrive at our disposable inbox.

![](https://raw.githubusercontent.com/shawnduong/ctf-writeups/master/2019-TAMU/images/Onboarding-Checklist-2.png)

Original writeup (https://github.com/shawnduong/ctf-writeups/blob/master/2019-TAMU/Misc/Onboarding-Checklist.md).