full-disclosure - i've found an exploit, but i want to make it do something before i report it

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20060707212905.63370.qmail@web88208.mail.re2.yahoo.com>
Date: Fri Jul  7 23:40:58 2006
From: i-am-cow at rogers.com (ima cow)
Subject: i've found an exploit,
	but i want to make it do something before i report it

i understand that this is "full disclosure", but before i actually spill the beans on the exact nature of the exploit i've found, i'd like to make it actually do something.
for now, know that it affects a popular plugin for a popular messaging program.
i'm at the stage where i can run any command on the remote user's computer (just like start > run...), or have them request remote assistance.
other than showing them goatse, what can i do with this?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060707/3d0c5fb3/attachment.html