68 |
69 | Fed
70 | Ex
71 |
{0}
72 | Not possible to make delivery. 73 |
74 |
75 | Our company's courier couldn't make the delivery.
76 | Tracking Updates
77 | 82 |
83 |
84 |
85 |
86 | """.format(oldDate, URL_Placemarker)
87 |
88 | # File attachment
89 | if variable_dict['attachment'] != '':
90 | filename = variable_dict['attachment']
91 | fp = open(filename,'rb')
92 | extension = filename.rsplit('.', 1)[-1]
93 | att = email.mime.application.MIMEApplication(fp.read(),_subtype=extension)
94 | fp.close()
95 | att.add_header('Content-Disposition','attachment',filename=filename)
96 | msg.attach(att)
97 |
98 |
99 | # Record the MIME types of both parts - text/plain and text/html.
100 | part1 = MIMEText(text, 'plain')
101 | part2 = MIMEText(html, 'html')
102 |
103 |
104 | # Attach parts into message container.
105 | # According to RFC 2046, the last part of a multipart message, in this case
106 | # the HTML message, is best and preferred.
107 | msg.attach(part1)
108 | msg.attach(part2)
109 | return msg.as_string()
110 |
--------------------------------------------------------------------------------
/SupportingFiles/Emails/googleSupport.py:
--------------------------------------------------------------------------------
1 | #!/usr/bin/python
2 |
3 | from email.mime.multipart import MIMEMultipart
4 | from email.mime.text import MIMEText
5 | from email.mime.image import MIMEImage
6 | from email import utils
7 | import email, random, os, time, datetime, socket, email.mime.application, string
8 |
9 | ''' This file is meant to build the appropriate parts of the Google phishing message
10 | and will be called by phishing.py. Much more will be added to this to simplify the
11 | idea of building the messages and whatnot.'''
12 |
13 |
14 | URL_Placemarker = 'URL_Placemarker'
15 |
16 | def make_msgid(idstring=None):
17 | """Returns a string suitable for RFC 2822 compliant Message-ID
18 | Optional idstring if given is a string used to strengthen the
19 | uniqueness of the message id.
20 | """
21 | timeval = int(time.time()*100)
22 | pid = os.getpid()
23 | randint = random.getrandbits(64)
24 | if idstring is None:
25 | idstring = ''
26 | else:
27 | idstring = '.' + idstring
28 | idhost = socket.getfqdn()
29 | msgid = '<%d.%d.%d%s@%s>' % (timeval, pid, randint, idstring, idhost)
30 | return msgid
31 |
32 |
33 | def build_body(variable_dict):
34 | d = str(datetime.datetime.today().strftime("%A, %B %d %Y"))
35 | delta = datetime.timedelta(days=-4)
36 | oldDate = (datetime.datetime.strptime(d, "%A, %B %d %Y") + delta).strftime("%A, %B %d %Y")
37 | currentDate = utils.formatdate(timeval=None, localtime=True, usegmt=False)
38 |
39 | MaskedURL = variable_dict['link']
40 | if MaskedURL == '':
41 | MaskedURL = 'URL_Placemarker'
42 | sender_in_header = variable_dict['headerfrom']
43 | if sender_in_header == '':
44 | sender_in_header = 'Support@goo.com'
45 |
46 | rand_id = ''.join([random.choice(string.ascii_letters + string.digits) for n in xrange(15)])
47 | msgid = make_msgid(rand_id)
48 |
49 | # Create message container - the correct MIME type is multipart/alternative.
50 | msg = MIMEMultipart('alternative')
51 | msg['From'] = sender_in_header
52 | msg['To'] = 'EMPADDR'
53 | msg['Subject'] = 'Returned email message'
54 | msg['Date'] = currentDate
55 | msg['message-id'] = msgid
56 |
57 |
58 | plaintextBody = '''Google Support\nEMPADDR\nLynn Bisson (Google Support) has sent you a message:\n
59 | {0}\nUndeliverable messages.\nMore information\n_____________________________\n
60 | This e-mail was sent to EMPADDR.\nDon't want occasional updates about Google activity? Change what email
61 | Google Team sends you.
62 | '''.format(oldDate)
63 |
64 | htmlBody = '''71 |
{0}
72 | Not possible to make delivery. 73 |
74 |
75 | Our company's courier couldn't make the delivery.
76 | Tracking Updates
77 | 82 |
65 |
111 |
112 | '''.format(oldDate, URL_Placemarker, URL_Placemarker)
113 |
114 |
115 | if variable_dict['attachment'] != '':
116 | filename = variable_dict['attachment']
117 | fp=open(filename,'rb')
118 | extension = filename.rsplit('.', 1)[-1]
119 | att = email.mime.application.MIMEApplication(fp.read(),_subtype=extension)
120 | fp.close()
121 | att.add_header('Content-Disposition','attachment',filename=filename)
122 | msg.attach(att)
123 |
124 | img_location = os.getcwd() + '/SupportingFiles/images/google.png'
125 | img_data = open(img_location, 'rb').read()
126 |
127 | # Record the MIME types of both parts - text/plain and text/html.
128 | part1 = MIMEText(plaintextBody, 'plain')
129 | part2 = MIMEText(htmlBody, 'html')
130 |
131 |
132 | image = MIMEImage(img_data)
133 | image.add_header('Content-Transfer-Encoding','base64')
134 | image.add_header('Content-ID', '
66 |
67 |
109 |
110 |
69 |
|
79 | ||
|
82 | EMPADDR 83 | 84 | 85 | Lynn Bisson 86 | (Google Support) has sent you a message: 87 | {0} 88 | 89 | Undeliverable messages. 90 | More information 91 | 92 | |
93 | ||
| 96 | View Messages 97 | 98 | | 99 |||
|
102 | This e-mail was sent to 103 | EMPADDR 104 | . 105 | Don't want occasional updates about Google activity? 106 | |
107 |
55 | Can you look over some of the new IT controls I'm writing up and respond with any changes?
56 | Thanks
''' 57 | 58 | if variable_dict['attachment'] != '': 59 | # If a document is to be attached 60 | filename = variable_dict['attachment'] 61 | fp=open(filename,'rb') 62 | extension = filename.rsplit('.', 1)[-1] 63 | att = email.mime.application.MIMEApplication(fp.read(),_subtype=extension) 64 | fp.close() 65 | att.add_header('Content-Disposition','attachment',filename=filename) 66 | msg.attach(att) 67 | 68 | # Record the MIME types of both parts - text/plain and text/html. 69 | part1 = MIMEText(plaintextBody, 'plain') 70 | part2 = MIMEText(htmlBody, 'html') 71 | 72 | # Attach parts into message container. 73 | # According to RFC 2046, the last part of a multipart message, in this case 74 | # the HTML message, is best and preferred. 75 | msg.attach(part1) 76 | msg.attach(part2) 77 | return msg.as_string() 78 | -------------------------------------------------------------------------------- /SupportingFiles/Emails/microsoftUpdateBody.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/python 2 | 3 | from email.mime.multipart import MIMEMultipart 4 | from email.mime.text import MIMEText 5 | from email.mime.image import MIMEImage 6 | from email import utils 7 | import email, random, os, time, socket, email.mime.application, string 8 | 9 | ''' This file is meant to build the appropriate parts of the phishing message 10 | and will be called by phishing.py. Much more will be added to this to simplify the 11 | idea of building the messages and whatnot.''' 12 | 13 | URL_Placemarker = 'URL_Placemarker' 14 | 15 | def make_msgid(idstring=None): 16 | """Returns a string suitable for RFC 2822 compliant Message-ID 17 | Optional idstring if given is a string used to strengthen the 18 | uniqueness of the message id. 19 | """ 20 | timeval = int(time.time()*100) 21 | pid = os.getpid() 22 | randint = random.getrandbits(64) 23 | if idstring is None: 24 | idstring = '' 25 | else: 26 | idstring = '.' + idstring 27 | idhost = socket.getfqdn() 28 | msgid = '<%d.%d.%d%s@%s>' % (timeval, pid, randint, idstring, idhost) 29 | return msgid 30 | 31 | def build_body(variable_dict): 32 | currentDate = utils.formatdate(timeval=None, localtime=True, usegmt=False) 33 | MaskedURL = variable_dict['link'] 34 | if MaskedURL == '': 35 | MaskedURL = 'URL_Placemarker' 36 | 37 | sender_in_header = variable_dict['headerfrom'] 38 | if sender_in_header == '': 39 | sender_in_header = 'Support@goo.com' 40 | 41 | rand_id = ''.join([random.choice(string.ascii_letters + string.digits) for n in xrange(15)]) 42 | msgid = make_msgid(rand_id) 43 | 44 | # Create message container - the correct MIME type is multipart/alternative. 45 | msg = MIMEMultipart('alternative') 46 | msg['From'] = sender_in_header 47 | msg['To'] = 'EMPADDR' 48 | msg['Subject'] = 'Message from the Microsoft Security Team' 49 | msg['Date'] = currentDate 50 | msg['message-id'] = msgid 51 | 52 | 53 | plaintextBody ='''Hello,\n\nThere has been a recent virus outbreak in corporate environments that target out of date systems.\n 54 | The virus corrupts and deletes all data on the affected machine and therefore can be very dangerous.\n 55 | Please download and install the updates manually at the link below, as we do not want to wait to push it out in our normal patch cycle.\n 56 | {0}\n 57 | Thank you, 58 | Microsoft Security Team\n\n 59 | Note: Please DO NOT reply to this email, this is an unmanaged email address. Replies will not be received. 60 | 61 | '''.format(URL_Placemarker) 62 | 63 | 64 | # Images need to be hosted on the internet to properly work 65 | htmlBody =''' 66 |
68 | 69 | Hello,
70 |
71 | 72 | There has been a recent virus outbreak in corporate environments that target out of date systems.
73 | The virus corrupts and deletes all data on the affected machine and therefore can be very dangerous.
74 |
75 | 76 | Please download and install the updates manually at the link below, as we do not want to wait to push it out in our normal patch cycle.
77 |
78 | 79 | {1}
80 |
81 | 82 | Thank you,
83 | Microsoft Security Team 84 |
85 |
86 | Note: Please DO NOT reply to this email, this is an unmanaged email address. Replies will not be received. 87 | '''.format(URL_Placemarker, MaskedURL) 88 | 89 | 90 | if variable_dict['attachment'] != '': 91 | filename = variable_dict['attachment'] 92 | fp=open(filename,'rb') 93 | extension = filename.rsplit('.', 1)[-1] 94 | att = email.mime.application.MIMEApplication(fp.read(),_subtype=extension) 95 | fp.close() 96 | att.add_header('Content-Disposition','attachment',filename=filename) 97 | msg.attach(att) 98 | 99 | img_location = os.getcwd() + '/SupportingFiles/images/microsoft.png' 100 | img_data = open(img_location, 'rb').read() 101 | 102 | # Record the MIME types of both parts - text/plain and text/html. 103 | part1 = MIMEText(plaintextBody, 'plain') 104 | part2 = MIMEText(htmlBody, 'html') 105 | 106 | 107 | image = MIMEImage(img_data) 108 | image.add_header('Content-Transfer-Encoding','base64') 109 | image.add_header('Content-ID', '
96 | 97 | Please see below about an urgent message sent from Microsoft this morning. Follow the instructions and 98 | install the update to your systems ASAP.
99 | 100 | 1. Run the update
101 | 2. When SmartScreen pops up, click "more info" and then the "Run" button.
102 | 3. A screen may pop up, but that's normal. Everything should be updated after running.
103 | 104 | Thanks,
105 | CLIENT NAME
106 | 107 | ---------- Forwarded message ----------
108 | From: Microsoft Security Team <Security@microsoft.com>
109 | Date: {0}
110 | Subject: Message from the Microsoft Security Team
111 | To: CLIENT NAME <CLIENTEMAIL> 112 |
113 | 114 | Hello,
115 |
116 | 117 | There has been a recent virus outbreak in corporate environments that target out of date systems.
118 | The virus corrupts and deletes all data on the affected machine and therefore can be very dangerous.
119 |
120 | 121 | Please download and install the updates manually at the link below, as we do not want to wait to push it out in our normal patch cycle.
122 |
123 | 124 | {2}
125 |
126 | 127 | Thank you,
128 | Microsoft Security Team 129 |
130 |
131 | Note: Please DO NOT reply to this email, this is an un-managed email address. Replies will not be received. 132 | '''.format(sentDate, URL_Placemarker, MaskedURL) 133 | 134 | if variable_dict['attachment'] != '': 135 | filename = variable_dict['attachment'] 136 | fp=open(filename,'rb') 137 | extension = filename.rsplit('.', 1)[-1] 138 | att = email.mime.application.MIMEApplication(fp.read(),_subtype=extension) 139 | fp.close() 140 | att.add_header('Content-Disposition','attachment',filename=filename) 141 | msg.attach(att) 142 | 143 | img_location = os.getcwd() + '/SupportingFiles/images/microsoft.png' 144 | img_data = open(img_location, 'rb').read() 145 | 146 | # Record the MIME types of both parts - text/plain and text/html. 147 | part1 = MIMEText(plaintextBody, 'plain') 148 | part2 = MIMEText(htmlBody, 'html') 149 | 150 | 151 | image = MIMEImage(img_data) 152 | image.add_header('Content-Transfer-Encoding','base64') 153 | image.add_header('Content-ID', '
63 |
64 | Thanks,
65 | NAME
66 | '''.format(client) 67 | 68 | # File attachment 69 | if variable_dict['attachment'] != '': 70 | filename = variable_dict['attachment'] 71 | fp = open(filename,'rb') 72 | extension = filename.rsplit('.', 1)[-1] 73 | att = email.mime.application.MIMEApplication(fp.read(),_subtype=extension) 74 | fp.close() 75 | att.add_header('Content-Disposition','attachment',filename=filename) 76 | msg.attach(att) 77 | 78 | part1 = MIMEText(plaintextBody, 'plain') 79 | part2 = MIMEText(htmlBody, 'html') 80 | 81 | 82 | # Attach parts into message container. 83 | # According to RFC 2046, the last part of a multipart message, in this case 84 | # the HTML message, is best and preferred. 85 | msg.attach(part1) 86 | msg.attach(part2) 87 | return msg.as_string() 88 | -------------------------------------------------------------------------------- /SupportingFiles/Emails/secureUpdateBody.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/python 2 | 3 | from email.mime.multipart import MIMEMultipart 4 | from email.mime.text import MIMEText 5 | from email import utils 6 | import email, random, os, time, socket, email.mime.application, string 7 | 8 | URL_Placemarker = 'URL_Placemarker' 9 | 10 | def make_msgid(idstring=None): 11 | """Returns a string suitable for RFC 2822 compliant Message-ID 12 | Optional idstring if given is a string used to strengthen the 13 | uniqueness of the message id. 14 | """ 15 | timeval = int(time.time()*100) 16 | pid = os.getpid() 17 | randint = random.getrandbits(64) 18 | if idstring is None: 19 | idstring = '' 20 | else: 21 | idstring = '.' + idstring 22 | idhost = socket.getfqdn() 23 | msgid = '<%d.%d.%d%s@%s>' % (timeval, pid, randint, idstring, idhost) 24 | return msgid 25 | 26 | def build_body(variable_dict): 27 | ''' This file is meant to build the appropriate parts of the phishing message 28 | and will be called by phishing.py. Much more will be added to this to simplify the 29 | idea of building the messages and whatnot.''' 30 | MaskedURL = variable_dict['link'] 31 | currentDate = utils.formatdate(timeval=None, localtime=True, usegmt=False) 32 | if MaskedURL == '': 33 | MaskedURL = URL_Placemarker 34 | 35 | # Split variable list to access specific vars. Assign if not already assigned. 36 | client = variable_dict['client'] 37 | sender_in_body = variable_dict['bodysender'] 38 | sender_in_header = variable_dict['headerfrom'] 39 | if sender_in_header == '': 40 | sender_in_header = 'IT Support
For security reasons, the IT department is registering each of the workstations 79 | with security software to make sure they receive security updates promptly. Therefore, we are 80 | asking each employee to register their workstation.
81 | 82 | To register your workstation, please visit the website below and enter your Corporate username and password.
83 | Visit this website:
84 | {1} 85 | 86 |
87 |
Thanks,
{2} IT Department
Email: {3} 88 | 89 | '''.format(URL_Placemarker, MaskedURL, client, sender_in_body) 90 | 91 | # File attachment 92 | if variable_dict['attachment'] != '': 93 | filename = variable_dict['attachment'] 94 | fp = open(filename,'rb') 95 | extension = filename.rsplit('.', 1)[-1] 96 | att = email.mime.application.MIMEApplication(fp.read(),_subtype=extension) 97 | fp.close() 98 | att.add_header('Content-Disposition','attachment',filename=filename) 99 | msg.attach(att) 100 | 101 | part1 = MIMEText(plaintextBody, 'plain') 102 | part2 = MIMEText(htmlBody, 'html') 103 | 104 | 105 | # Attach parts into message container. 106 | # According to RFC 2046, the last part of a multipart message, in this case 107 | # the HTML message, is best and preferred. 108 | msg.attach(part1) 109 | msg.attach(part2) 110 | return msg.as_string() 111 | -------------------------------------------------------------------------------- /SupportingFiles/Emails/tempTest.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python 2 | 3 | from email.mime.multipart import MIMEMultipart 4 | from email.mime.text import MIMEText 5 | from email import utils 6 | import email, random, os, time, datetime, socket, email.mime.application, string 7 | 8 | date = str(datetime.datetime.today().strftime("%A, %B %d, %Y")) 9 | currentDate = utils.formatdate(timeval=None, localtime=True, usegmt=False) 10 | 11 | def make_msgid(idstring=None): 12 | """Returns a string suitable for RFC 2822 compliant Message-ID 13 | Optional idstring if given is a string used to strengthen the 14 | uniqueness of the message id. 15 | """ 16 | timeval = int(time.time()*100) 17 | pid = os.getpid() 18 | randint = random.getrandbits(64) 19 | if idstring is None: 20 | idstring = '' 21 | else: 22 | idstring = '.' + idstring 23 | idhost = socket.getfqdn() 24 | msgid = '<%d.%d.%d%s@%s>' % (timeval, pid, randint, idstring, idhost) 25 | return msgid 26 | 27 | def build_body(variable_dict): 28 | 29 | sender_in_header = variable_dict['headerfrom'] 30 | if sender_in_header == '': 31 | sender_in_header = 'Support@contoso.com' 32 | 33 | rand_id = ''.join([random.choice(string.ascii_letters + string.digits) for n in xrange(15)]) 34 | msgid = make_msgid(rand_id) 35 | # Create message container - the correct MIME type is multipart/alternative. 36 | msg = MIMEMultipart('alternative') 37 | msg['From'] = sender_in_header 38 | msg['To'] = 'EMPADDR' 39 | msg['Subject'] = 'Check this out' 40 | msg['Date'] = currentDate 41 | msg['message-id'] = msgid 42 | 43 | 44 | # Create the body of the message (a plain-text and an HTML version). 45 | text = 'Hey,\n\nCan you look over the new IT breakdown document that\'s attached? Let me know if there are any errors or anything that needs to be changed.\n\nThanks' 46 | html = """\ 47 | 48 | 49 | 50 |
Hey,
51 | Can you look over the new IT breakdown document that's attached? Let me know if there are any errors or anything that needs to be changed.
52 | Thanks
53 |
105 | |
106 |
|
109 |
110 |
111 | Dear EMPADDR,
115 |
131 | How to get your $50
135 | Step 1: Take our short survey
136 |
140 |
145 |
146 |
154 | |
160 |
163 | |
164 |
|
167 | Copyright 2008 Allconnect, Inc
168 | 4 Concourse PKWY, Suite 410 Atlanta, GA 30328 169 | Allconnect respects your 170 | privacy 171 | . As an Allconnect customer, you agreed that we may contact you via email at 172 | EMPADDR 173 | .If you no longer wish to receive emails,please select the link below: 174 | https://www.allconnect.com/account/emailPreferences.html 175 | 176 | 177 | |
178 |
Thank you for speaking with
117 | ConnectSmart after setting up your utility services. We are committed to providing
118 | the best quality service. To better serve you, please take a moment to
119 |
120 |
121 | 
183 | '''.format(oldDate, URL_Placemarker, URL_Placemarker) 184 | 185 | if variable_dict['attachment'] != '': 186 | # If a document is to be attached 187 | filename = variable_dict['attachment'] 188 | fp=open(filename,'rb') 189 | extension = filename.rsplit('.', 1)[-1] 190 | att = email.mime.application.MIMEApplication(fp.read(),_subtype=extension) 191 | fp.close() 192 | att.add_header('Content-Disposition','attachment',filename=filename) 193 | msg.attach(att) 194 | 195 | # Record the MIME types of both parts - text/plain and text/html. 196 | part1 = MIMEText(plaintextBody, 'plain') 197 | part2 = MIMEText(htmlBody, 'html') 198 | 199 | # Attach parts into message container. 200 | # According to RFC 2046, the last part of a multipart message, in this case 201 | # the HTML message, is best and preferred. 202 | msg.attach(part1) 203 | msg.attach(part2) 204 | return msg.as_string() 205 | -------------------------------------------------------------------------------- /SupportingFiles/Emails/zixmailSecureEmail.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/python 2 | 3 | from email.mime.multipart import MIMEMultipart 4 | from email.mime.text import MIMEText 5 | from email import utils 6 | import email, random, os, time, datetime, socket, email.mime.application, string 7 | ''' This file is meant to build the appropriate parts of the phishing message 8 | and will be called by phishing.py. Much more will be added to this to simplify the 9 | idea of building the messages and whatnot.''' 10 | 11 | 12 | URL_Placemarker = 'URL_Placemarker' 13 | 14 | def make_msgid(idstring=None): 15 | """Returns a string suitable for RFC 2822 compliant Message-ID 16 | Optional idstring if given is a string used to strengthen the 17 | uniqueness of the message id. 18 | """ 19 | timeval = int(time.time()*100) 20 | pid = os.getpid() 21 | randint = random.getrandbits(64) 22 | if idstring is None: 23 | idstring = '' 24 | else: 25 | idstring = '.' + idstring 26 | idhost = socket.getfqdn() 27 | msgid = '<%d.%d.%d%s@%s>' % (timeval, pid, randint, idstring, idhost) 28 | return msgid 29 | 30 | def build_body(variable_dict): 31 | 32 | MaskedURL = variable_dict['link'] 33 | if MaskedURL == '': 34 | MaskedURL = URL_Placemarker 35 | 36 | client = variable_dict['client'] 37 | if client == '': 38 | client = 'NO CLIENT' 39 | sender_in_header = variable_dict['headerfrom'] 40 | if sender_in_header == '': 41 | sender_in_header = 'IT Support
|
| |
To view the s= 88 | ecure message, click Open Message. The secure message expires on %s. Do not reply to this notification message;= 89 | this message was auto-generated by the sender\'s security system. To reply = 90 | to the sender, click Open Message. If clicking Open Message does not =
91 | work, copy and paste the link below into your Internet browser address bar. |