xx.html
<html> <head> <title>邮件欺骗</title> <body> <h3>社工必备-邮件欺骗</h3> <form action="email_spoof_script.php" method="post"> <p>要伪造的邮件: <input type="text" name="spoofemail" size="30"</p> <p>发送到: <input type="text" name="toemail" size="30"</p> <p>主题: <input type="text" name="subject" size="30"</p> <p>内容: </p> <p><textarea rows="10" cols="20" name="message"></textarea></p> <input type="submit" name="submit" value="Send Spoofed Email!"> </body> </html>
email_spoof_script.php
<?php $from=$_POST['spoofemail']; //接受伪造的邮件 $email=$_POST['toemail']; //接受发送到的地址 $subject=$_POST['subject']; //接受输入的主题 $message=$_POST['message']; //接受内容 mail($email, $subject, $message, "From: " . $from); //把接受到的内容发送并替换电子邮件 print "<h3>您的邮件已发送成功. 这是您的电子邮件:</h3> <br>From: $from<br>To: $email<br>Subject: $subject<br>Message: $message"; ?>