CAP6135: Malware and Software Vulnerability Analysis
(Spring 2010)

Home                      Lecture notes                        Assignment


Homework 1: Manually send a spam email

    In this simple assignment, you will need to use telnet to manually send a spam (faked) email to our TA Baber Aslam  at <ababer@gmail.com>. From this experiment, you will understand why there are so many untrusted email around and how easy for attackers to send out spam or phishing email.

Please follow the in-class illustration to send this faked email. In order to make these assignment email not be treated as the other spam email, you must follow the following specifications:

1.  The sender email must be "fake@", you can use any domain name in the sender email address except domains belonging to UCF (i.e., do not use cs.ucf.edu, eecs.ucf.edu, knights.ucf.edu, or longwood.eecs.ucf.edu).

2.  The email must have a subject as "CAP6135: firstname lastname". Put your name in the subject line so that you can be credited. Otherwise the TA cannot know who send this email!

3.  The email must have a "from: ..." and the "to: ...." field. These two fields are displayed when you read an email. You can put whatever text you want on these two fields.

4.  Put in some words in the content. Must be at least two lines.

You can type in two "rcpt to:" to include your own email address for verification in the second "rcpt to". Because EECS email server support relay, so you can use this server to email any email address (of course you can only do this relay if you are inside campus network, either after setting up your campus VPN, or if you do the telnet from EECS eustics machine).

Submission:

    1.  You need to send this spam email and submit your report by Feb. 23rd 11:59pm. Late submission is Feb. 25th 11:59pm with 20 points off.
    2.  In the webCourse, submit a brief report showing your telnet interaction steps. You can copy the interaction steps onto your report, or put the screen printout in the report.

The TA will provide grade via webCourse.