"SpamChannel: Spoofing Emails From 2 Million+ Domains and Virtu..." Marcello "byt3bl33d3r" Salvati

[number6]

SpamChannel: Spoofing Emails From 2 Million+ Domains and Virtually Becoming Satan ,

Marcello "byt3bl33d3r" Salvati, Hacker & Entrepreneur, He/Him
| Demo, Tool | 45



Ever wake up and ask yourself: “Damn, how could I make email security suck even more today”?Tired of your Red Teams phishing emails not landing in your targets inbox?
Do you dislike Boston (the city) and love Satan?

If you answered yes to any of those questions you should come to this talk!

I'll be showing you how to spoof emails from 2 million+ domains (while also “bypassing” SPF & DMARC!) by (ab)using a partnership between Cloudflare and the “biggest transactional email service” on the interwebs. We'll be diving into "edge" serverless applications and the magical world of email security where everything is (still) held up by duct tape, pasta, and marinara sauce. Finally, I’ll be dropping code and releasing a tool that demonstrates how to impersonate emails from 2million+ domains.


Marcello Salvati (byt3bl33d3r) is a hacker & entrepreneur with over a decade of experience as an Offensive Security Researcher, Blue/Purple/Red Teamer and Open Source developer. Marcello is known for creating a number of Open Source tools such as CrackMapExec and weaponizing unorthodox programming languages for malware purposes.


@byt3bl33d3r

Github: @byt3bl33d3r (https://github.com/byt3bl33d3r)
LinkedIn: @byt3bl33d3r (https://www.linkedin.com/in/byt3bl33d3r/)


REFERENCES:

https://blog.mailchannels.com/mailch...kers-customers
https://trends.builtwith.com/mx/tran...ntire-Internet
https://blog.cloudflare.com/sending-...-mailchannels/
https://trends.builtwith.com/websitelist/MailChannels
https://www.rapid7.com/research/project-sonar/
https://gist.github.com/ihsangan/611...97d28d8454ad8d
https://community.cloudflare.com/t/s...free/361973/11
WWW'22 Talk: Revisiting Email Forwarding Security under the Authenticated Received Chain Protocol (https://www.youtube.com/watch?v=V9kajr5dESs)
http://arc-spec.org/
https://www.rfc-editor.org/rfc/rfc8617.html

[thule]

What is the URL for the testing tool? Something, something, haxx, something.

[number6]

I do not run anything at DEF CON 31. The content posted was provided to me from speaker department.

If it was content in the slide, it is possible the slides given to us (DEF CON) may have what you want.
Visit https://media.defcon.org/DEF%20CON%2...presentations/
"find on page" the string "SpamChannel" consider downloading these files to see if they contain what you are looking for.

If you do find what you are looking for, would you let people know the link to the file and the URL you were looking for?