Email Scraper, 自动发短信 邮件 自动接收短信 接收邮件 Mail Sms Automatic Sending Ad Broadcasting, Email Verification, Sms Verification, Sms Login, Email Login, Temp Mail, Email Osint

advertising
mail sending
SMS
This article delves into email verification techniques and strategies, along with methods to send mass emails or SMS anonymously. It highlights platforms like mailcat and theHarvester for collecting emails, APIs for SMS flooding, and Telegram bots for efficient marketing.
Published

July 4, 2022

email

email OSINT

OSINT/recon 其实就是社工 但是一般人喜欢把社工库和社工分开 因为社工库是社工收集来的数据集合 而社工则是一个过程

loading/transforming leaked txt files will be time-consuming. use pypy to speedup the process. use database specific batch processing method to import the data.

entity fragmentation in followthmoney is kind of for “entity recognition in multiple social platforms”, suitable for finding patterns/clients in large leaked databases.

email collector

socialscan Python library for accurately querying username and email usage on online platforms

Zen collect email on github

maigret a powerful fork of sherlock (customizable, finding accounts by username, but only having 300+ sites ) with 2000+ sites

emailAll collect email by passing domain

emailfinder find email by domain

theHarvestor email, subdomain and names collector

gitscan scan for email and password (if possible) with predefined domains and rules by searching github

ghunt needs companion browser plugin to get credentials. can collect info on given email

EMAGNET collect database leaks, email and password from recent pastebin records

leaked email and data

occrp (anti corruption & crime) aleph is a bad source for getting email (anonymous/unauthorized user can only get hundreds, having no clue what the email relates to). however, it has a tool called follow the money which works with csv files and exports cypher to neo4j

leaks on github

search for leaked database on github

linkedin database leak 2021 (hate mega since it has download quota)

leaks from forums

you typically find links to these databases on anonfiles.com (or else), so query like site:anonfiles.com email rar in duckduckgo (no DMCA censorship)

breachedforum’s index contains “credits only” threads which requires 4-8 credits to unlock. to get credits you need to create thread (which will earn 0 credit) and get 1 credit per reply. post to trivial threads like manga.

in leakbase you earn credits and download leaked databases easier. it has official telegram bot claims to leak free databases everyday.

telegram bots

find telegram bots collection in privacy.club (only OSINT bots) and here (with many other bots)

摆烂bot 永久免费

SGKmainNEWbot

sgkmainbot

(gone?) FreeSGKbot

FreeSGKbot4

KernelBugXBot

check registration account with email

reg007 counterpart only check if that account “exists”, but no actual account shown. search for reg007 on github you will get a bunch of links relating to OSINT.

holehe only check if an email address is registered as account elsewhere using “forget my password” APIs.

sreg is found from a collection of security tools, which is a deprecated tool for getting registration status with phone/email/username on multiple chinese platforms.

(email) account verifier

Usually it only verify existance of given email, like emailhippo (100 requests free per day per ip), or mailforguess checking “gmail”,“laposte”,“protonmail”,“yahoo” emails

Some of them verify email with password: verify email address and password with API of my.com

h8mail email osint tool, can chase and link to social profile, with many API-key required free services

mosint automated email osint tool, requires many API keys.

ignorant checks if a phone number is used for snapchat/instagram

email connectors/client

proton mail unofficial client in python

email registration

yandexmail account creator

before it was using 2captcha, now using 5sim to receive sms

only login such account through pop3 and imap to prevent revocation

outlook email generator

using 2captcha and anycaptcha for captcha solving (paid)

protonmail email generator

using noptcha or nopecha browser extension (free for 100 captcha solves per day) solving hcaptcha, recaptcha. this extension cannot be used with proxy.

muumuu (which reminds me of someone) email registration using 2captcha, selenium and pyautogui

I place the list under /root/.muumuu_emails

the muumuu mail is programmatically connectable using account and password. seems it is using default ports for these services. POP3 is for both sending and receiving. IMAP is for receiving. SMTP is for sending.

this guy’s code is full of hacks. seems only being able to run on his own computer and will break on slightest errors.

he stored potential password combinations and also registered accounts (need testing, some may not work) on this google doc. you can download the sheet named “Sheet1” by this api, which adds double quotes and takes more space than exported from web interfaces, method described here.

receiving-only email services

temp email

tempumail get free temp edu email

erine.email

email proxy for resending email to you, which I used for github registration (but with a very high block rate without proxy)

email aliasing for sending

icloud’s “hide my email” service seems only provide few email aliases. but according to 3rd party icloud alias generator (cannot be used for chinese version of icloud) you can generate at least 10 aliases. or use hidemyemail-api to login with pyicloud and get aliases as API service. account registered from web without logged in any apple device (maybe virtualbox -> macos has a shot?) will not have email service.

to send email from alias, you can try setting “FROM” address as your alias via smtp protocol, but the credential shall stay the same. the working approach could be platform specific

yahoo provides the most email alias up to 500, but 10 for send only emails. however to get one yahoo account one needs offshore phone numbers.

email collection, email scraping

searching for “site:pastebin.com @yahoo.com” to get some email addresses, also searching in github might help as well.

mailcat find email address by nickname (check if deliverable?)

theharvestor: email harvestor

email collector

domain and email collector

email marketing

use other’s links/contents to increase diversity and increase anonymity. put your related contents among them.

email marketing is quantity over quality. know your customers’ preferences and behaviors (language, country, life schedule (by year? month? week? time in a day?)) by linking their accounts on other platforms, telemetry.

email bulk senders are equipped with email templates, statistics (like opened or not, click data monitoring)

vary your email style and content unless you want to get blocked/trashed by servers

email templates

premail is an easy-to-use component-based build system for MJML, the email templating language

SMS

sending SMS

发送短信 邮件 第一步是收集目标的邮箱和手机号码 收集目标ID 可从社工库中获取 可以根据社工的metadata决定推送内容类别

SMS flooding

smsboom by whalefall 远程获取的api 不知道是干啥的 有待研究

这个的原理是收集了大量发验证码到目标的手机号的api

repo转移到了openethan下面

考虑破解这些网站 获取它们的短信验证所需要的credential

https://github.com/WhaleFell/SMSBoom

sending SMS with content

send sms 1 per day per ip (you might use tor to do ip switching):

https://textbelt.com/

https://github.com/HACK3RY2J/Anon-SMS

https://github.com/typpo/textbelt

freesms: (don’t work for my phone number as recipient though, but I found some interesting projects on github relating to free SMS sending, some using OCR to crack captcha and access API)

https://www.afreesms.com/freesms/

yoy might want phone number lists for sending ads via free sms providers

shows [number]@139.com is the only email2sms gateway in china

https://email2sms.info

list of email2sms providers:

https://www.howtogeek.com/howto/27051/use-email-to-send-text-messages-sms-to-mobile-phones-for-free/

http://www.mutube.com/projects/open-email-to-sms/gateway-list/

http://en.wikipedia.org/wiki/List_of_carriers_providing_Email_or_Web_to_SMS

receiving SMS

free sms receiving

sms auto regist is written in go, utilizing yunjiema.top for sms receiving

online sms receivers are not so reliable (not even usable for yahoo registration), and those found from google searches (like free receive sms (这个网站有反js调试 打开debugger自动暂停执行), which has simple interface for fetching data, and you can search this site on github to get more sources and potential API adaptors like disposable phonebook) have chances to get registered yahoo accounts.

account registration helpers: verification, captcha solving, proxies

account generator helper including:

Temp email services
Receive SMS
Generate data
Proxy parser
Captcha solving

proxies

Proxy-Cheap pay by data amount