# Onboarding Checklist
We need to send an email address to [email protected]. We have a message that was sent from [email protected] to [email protected]. The message said that [email protected] is expecting an email from [email protected]. This is a classic email spoofing problem. We need to send an email spoofing as [email protected], even though we don't have access to this account.
While we could set up our own SMTP server to accomplish this, I'm instead going to be using Shubham Badal's [email-spoofer](https://github.com/ShubhamBadal/email-spoofer) [tool](https://shubhambadal.github.io/email-spoofer/). I'm also going to set up a disposable, temporary email address at [grr.la](https://www.guerrillamail.com) to receive an email from [email protected].
![](https://raw.githubusercontent.com/shawnduong/ctf-writeups/master/2019-TAMU/images/Onboarding-Checklist-1.png)
Now we just wait for the message to arrive at our disposable inbox.
![](https://raw.githubusercontent.com/shawnduong/ctf-writeups/master/2019-TAMU/images/Onboarding-Checklist-2.png)