# Onboarding Checklist

We need to send an email address to [email protected]. We have a message that was sent from [email protected] to [email protected]. The message said that [email protected] is expecting an email from [email protected]. This is a classic email spoofing problem. We need to send an email spoofing as [email protected], even though we don't have access to this account.

While we could set up our own SMTP server to accomplish this, I'm instead going to be using Shubham Badal's [email-spoofer](https://github.com/ShubhamBadal/email-spoofer) [tool](https://shubhambadal.github.io/email-spoofer/). I'm also going to set up a disposable, temporary email address at [grr.la](https://www.guerrillamail.com) to receive an email from [email protected].


Now we just wait for the message to arrive at our disposable inbox.


Original writeup (https://github.com/shawnduong/ctf-writeups/blob/master/2019-TAMU/Misc/Onboarding-Checklist.md).