I am here :)pic.twitter.com/ama5jEyh5y
I once got 90% of a critical vulnerability in Mozilla Persona's password reset. 8 years later, it still hurts that I didn't complete it. Has anyone ever successfully exploited SMTP injection via the Reply-To+Eicar technique or similar non-CC methods?https://bugzilla.mozilla.org/show_bug.cgi?id=741814 …
-
-
-
That looks like the classic CC technique to me?
Kraj razgovora
Novi razgovor -
-
-
SMTP injection is such an awesome bug... I had some neat ones where I could overwrite the sender/body and hide the original content but nothing that didn’t only compromise integrity
-
I could inject a very long text into Google’s emails, which however contained the old template after my text. So i ended my text with <script>, which made mailbox filters think there was an xss, sanitizing the tag and the original mail template. Not smtp, but still fun to know
- Još 1 odgovor
Novi razgovor -
-
-
Is the reply-to+eicar attack written about anywhere? I can't find any reference and I'm wracking my brain trying to figure out how that would work.
-
Click the link ;)
Kraj razgovora
Novi razgovor -
-
-
nope nope nope
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.