full-disclosure - Re: How to receive SPAM mail

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sun, 8 Nov 2009 09:05:40 +1100
From: dramacrat <yirimyah@...il.com>
To: Michael Holstein <michael.holstein@...ohio.edu>
Cc: Full disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: How to receive SPAM mail

If you want to be spammed, join full-disclosure.

2009/11/7 Michael Holstein <michael.holstein@...ohio.edu>

>
> > I have a SPAM filter and virus firewall testing.
> > So, I want to get the real SPAM is sent to a specific email address.
> > What better way is there anything?
> >
>
> I had to do a similar thing when doing a spam-appliance "vendor
> shakedown" .. what I did was setup a subdomain
>
> eg: test.mycompany.com
>
> and then create email IDs within that subdomain that had valid mailboxes
>
> eg: bob@...t.mycompany.com, suzie@...t.mycompany.com, etc.
>
> and then I used Google to search for "free offers" and "work from home",
> etc. and entered those IDs on about 100 different sites. There's tons of
> sites out there that you can sign-up for "hundreds of free offers" and
> whatnot.
>
> Within days I was getting hundreds of messages per day for each ID.
>
> Note .. they have to be valid mailboxes because you frequently need to
> reply to the "activation" email to make them work. You could setup a
> little script to wget any links in emails received and do "-O /dev/null"
> with the results .. but I just had all the accounts configured on a test
> machine in thunderbird so I could view what came through and the
> resulting "junk summary" emails.
>
> The advantage of doing it as a subdomain (or just register another test
> domain) is that you can make the traffic go away entirely by deleting
> the DNS record.
>
> Regards,
>
> Michael Holstein
> Cleveland State University
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/