Hidden Service

SpamLess

In this post, I’m going to solve the SpamLess challenge from UUTCTF2021. It is about sending an email without being spam to [email protected] address. The mail server is served as a Tor’s hidden service.

Now the writeup …

The Challenge

SpamLess Challenge

I’ve described the needed tools and methods for solving the question in the following video. You can check my previous post about fetching a hidden service’s public key which is needed for solving this challenge.

SpamLess WriteUp – UUTCTF2021

If you have any question, you can reach me by email.

Read more

TorBird

In the previous post, I’ve talked about configuring a hidden email server using hMailServer. In this post I will talk about how to access this hidden Email server. I’m using ThunderBird as email client, tajbakhsh.fake as the fake domain of email server (and accounts), two users ([email protected] and [email protected]).

During all the processes, I assume that the email server is configured as previous post and client has access to the TOR network.

Continue reading Connecting to Hidden Mail Server
Read more

Onion hMailServer

In this post, I will talk about configuring an Email server which is accessible using TOR. Using TOR will make its IP to be hidden, also accessible if it is behind NAT (inside a home computer without a public IP). But the main question is why one should use this kind of scenario?

Many people may not trust messaging services such as Telegram or WhatsApp but want to have their own private communication system. In this tutorial, you can run your own mail server in your home LAN and access it through Internet without spending money for public IP or VPS.

For the email server part, I will use hMailServer, an open source email server developed for windows.

Continue reading Configuring a Hidden Email Server
Read more