Email spamming has been most common for the last 10-20 years. There are many individuals or groups of attackers who spread malicious content by choosing email services as a weapon. According to an ethical hacking researcher at the International Institute of Cyber Security, many online tools help in finding the path of an email. Recently there are many unknown spam emails were found spreading malware over the internet. But very few show if email exists or not. Today we will show you a small Python script KnockMail designed to found if emails exist or not.
- For testing we are using Kali Linux 2019.1 amd64. Before installing Knockmail, must ensure to install python.
- Type sudo apt-get update && sudo apt-get install python.
- Type git clone https://github.com/4w4k3/KnockMail.git
- Type cd KnockMail && chmod u+x requeriments.txt knock.py
- Type pip install -r requeriments.txt
- Type python knock.py
root@kali:~/Downloads/KnockMail# python knock.py
By: @4w4k3
https://github.com/4w4k3
[- -]
_| _| _|
_| _| _|_|_| _|_| _|_|_| _| _|
_|_| _| _| _| _| _| _|_|
_| _| _| _| _| _| _| _| _|
_| _| _| _| _|_| _|_|_| _| _|
mail
[ ] Knock Knock Mail [ ]
v1.0
[- -]
-Usage- Select an option:
[1] Perform a search of emails from specified file.
[2] Single search for specified email.
[U] Update.
[E] Exit.- Type 2 & then enter email address. baj#############@gmail.com is the testing email id.
- For testing we are using one of our ethical hacking researchers of International Institute of Cyber Security email ID. For security we have hide the email address.
KKM > 2
Type the email to search: baj#############@gmail.com
[*] FOUND - [baj#############@gmail.com ]
KKM >
- Above query shows that email exist & is found by Knockmail.
- For further testing we are using unknown mail id. The mail representing to open first Demat account. Mail came from [email protected] as a spam
- While checking email with Knock mail. We found :
- Type python knock.py
root@kali:~/Downloads/KnockMail# python knock.py
By: @4w4k3
https://github.com/4w4k3
[- -]
_| _| _|
_| _| _|_|_| _|_| _|_|_| _| _|
_|_| _| _| _| _| _| _|_|
_| _| _| _| _| _| _| _| _|
_| _| _| _| _|_| _|_|_| _| _|
mail
[ ] Knock Knock Mail [ ]
v1.0
[- -]
-Usage- Select an option:
[1] Perform a search of emails from specified file.
[2] Single search for specified email.
[U] Update.
[E] Exit.- Type 2 & then enter [email protected]
KKM > 2
Type the email to search: [email protected]
[!] NOTFD - [[email protected]]
KKM >
- The above output shows that the email address is not found (NOTFD). This means the email has been generated from a temporary mail address. Or temporary email server has been used to send spam emails to targets.
USING SMALL LIST OF EMAILS:-
- Type python knock.py
root@kali:~/Downloads/KnockMail# python knock.py
By: @4w4k3
https://github.com/4w4k3
[- -]
_| _| _|
_| _| _|_|_| _|_| _|_|_| _| _|
_|_| _| _| _| _| _| _|_|
_| _| _| _| _| _| _| _| _|
_| _| _| _| _|_| _|_|_| _| _|
mail
[ ] Knock Knock Mail [ ]
v1.0
[- -]
-Usage- Select an option:
[1] Perform a search of emails from specified file.
[2] Single search for specified email.
[U] Update.
[E] Exit.- Type 1 then enter /root/Downloads/KnockMail/inputfile.txt
- For testing, we have a hidden list of email addresses. For grabbing a list of email addresses you can use Theharvester.
KKM > 1
Type the path of file containing a list of emails: /root/Downloads/KnockMail/inputfile.txt
[!] NOTFD - [r##########[email protected]] {line 1}
[*] FOUND - [U##############[email protected]] {line 2}
[!] NOTFD - [e###########[email protected]] {line 3}
KKM >
- The above query shows only one email ID is found & the rest of the email IDs were not found. This tool shows email existence.
