bugtraq - Re: Re: Exploiting Google MX servers as Open SMTP Relays

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: 10 May 2008 20:01:46 -0000
From: pablo.ximenes@....edu
To: bugtraq@...urityfocus.com
Subject: Re: Re: Exploiting Google MX servers as Open SMTP Relays

Hi,

We are not talking about backscattering. Our attack uses Google's MX servers like open SMTP relays. Messages are delivered as sent, and not as a delivery failure notification.

We are still expecting to hear from Google, but we will be releasing more details about the issue together with the PoC exploit shortly.

Regards,
-
Pablo Ximenes
INSERT
http://ece.uprm.edu/~andre/insert