Solution to spamming, Check any Unknown Email ID existence

Email spamming is most common from last 10-20 years. There are many individual or groups of attackers who spread malicious content by choosing email services as weapon. According to ethical hacking researcher of international institute of cyber security there are many online tools which helps in finding path of an email. Recently there are many unknown spam emails were found spreading malware’s over the internet. But very few shows if email exist or not. Today we will show you an small python script KnockMail designed to found if emails exist or not.

  • For testing we are using Kali Linux 2019.1 amd64. Before installing Knockmail, must ensure to install python.
  • Type sudo apt-get update && sudo apt-get install python.
  • Type git clone https://github.com/4w4k3/KnockMail.git
  • Type cd KnockMail && chmod u+x requeriments.txt knock.py
  • Type pip install -r requeriments.txt
  • Type python knock.py
root@kali:~/Downloads/KnockMail# python knock.py
By: @4w4k3
https://github.com/4w4k3
[-                                              -]


 _|    _|                                _|
 _|  _|    _|_|_|      _|_|      _|_|_|  _|  _|
 _|_|      _|    _|  _|    _|  _|        _|_|
 _|  _|    _|    _|  _|    _|  _|        _|  _|
 _|    _|  _|    _|    _|_|      _|_|_|  _|    _|
                                               mail
            [ ] Knock Knock Mail [ ]
                                        v1.0
[-                                              -]

-Usage- Select an option:

  [1]     Perform a search of emails from specified file.
  [2]     Single search for specified email.
  [U]     Update.
  [E]     Exit.
  • Type 2 & then enter email address. baj#############@gmail.com is the testing email id.
  • For testing we are using one of our ethical hacking researchers of International Institute of Cyber Security email ID. For security we have hide the email address.
KKM > 2
Type the email to search: baj#############@gmail.com
[*] FOUND - [baj#############@gmail.com ]
KKM >
  • Above query shows that email exist & is found by Knockmail.
  • For further testing we are using unknown mail id. The mail representing to open first Demat account. Mail came from newsletters@smtpmailbox.com as a spam
  • While checking email with Knock mail. We found :
  • Typepython knock.py
 root@kali:~/Downloads/KnockMail# python knock.py 
By: @4w4k3
https://github.com/4w4k3
[-                                              -]


 _|    _|                                _|
 _|  _|    _|_|_|      _|_|      _|_|_|  _|  _|
 _|_|      _|    _|  _|    _|  _|        _|_|
 _|  _|    _|    _|  _|    _|  _|        _|  _|
 _|    _|  _|    _|    _|_|      _|_|_|  _|    _|
                                               mail
            [ ] Knock Knock Mail [ ]
                                        v1.0
[-                                              -]

-Usage- Select an option:

  [1]     Perform a search of emails from specified file.
  [2]     Single search for specified email.
  [U]     Update.
  [E]     Exit.
  • Type 2 & then enter newsletters@smtpmailbox.com
KKM > 2
Type the email to search: newsletters@smtpmailbox.com
[!] NOTFD - [newsletters@smtpmailbox.com]
KKM >
  • Above output shows that email address is not found (NOTFD). Which means email has generated from temporary mail address. Or temporary email server has been used to send spam emails to targets.

Using Small List of Emails :-

  • Type python knock.py
root@kali:~/Downloads/KnockMail# python knock.py  
By: @4w4k3
https://github.com/4w4k3
[-                                              -]


 _|    _|                                _|
 _|  _|    _|_|_|      _|_|      _|_|_|  _|  _|
 _|_|      _|    _|  _|    _|  _|        _|_|
 _|  _|    _|    _|  _|    _|  _|        _|  _|
 _|    _|  _|    _|    _|_|      _|_|_|  _|    _|
                                               mail
            [ ] Knock Knock Mail [ ]
                                        v1.0
[-                                              -]

-Usage- Select an option:

  [1]     Perform a search of emails from specified file.
  [2]     Single search for specified email.
  [U]     Update.
  [E]     Exit.
  • Type 1 then enter /root/Downloads/KnockMail/inputfile.txt
  • For testing we have hide list of email addresses. For grabbing list of email addresses you can use Theharvester.
KKM > 1
Type the path of file containing a list of emails: /root/Downloads/KnockMail/inputfile.txt
[!] NOTFD - [r##########dd@gmail.com] {line 1}
[*] FOUND - [U##############ol@hotmail.com] {line 2}
[!] NOTFD - [e###########ge@protonmail.com] {line 3}
KKM >
  • Above query shows only one email id is found & rest of email ID were not found. This tool shows emails existence.