Tuesday 13 March 2012

Planning a Modern Joe Job

Right this is what we will need to do, we will have to find a good target, reality is this could be any one person or any company, organisation or government office.  We wont need the valid email address of the target unless it is actually an individual.  All we will need is a support, information or sales email address, this can usually be obtained from their websites Contact Us page.

Next we go to a children's names website and grab all the possible male and female names as they are usually listed in a column and can be easily highlighted, copied and pasted. In exactly the same way we need to go to a Genealogy website and copy about two hundred surnames, all in all we need about three hundred forenames and two hundred surnames, exactly sixty thousand combinations of of both.

Right now go through your Internet history and grab about one hundred web addresses, all you really need is the TLD, as everyone knows that means top level domain, the bit that doesn't include the www., i.e. microsoft.com or google.co.uk.  Add the @ symbol and now you have six hundred thousand possible email addresses.

Now the technical bit, we need to find about 10 anonymous email relays around the world, a small application usually personally written that will iterate through combinations of forename, surname, domain name and anonymous relay.  The personal little application you have written will send approximately seventeen emails a second and the great thing about it is you can set the details within the email like the email address so the return and the reply-to email address can be set to the email you are sending to, if the email bounces back to the originators email address it will subsequently be bounced back to your target.

So if you run the application over a weekend you can expect the target email server to received a few million emails and be fending off replies, returns and bounced emails for the next few weeks.

The obvious intention is to cripple the targets email and potentially their website too.  Taking out the commercial or marketable aspect of competitors for between 3 days and possibly three weeks.

Reference : http://en.wikipedia.org/wiki/Joe_job

No comments: