Ok, you saw my post about www.agn-e.com having formmail.pl (v 1.6 no
less) on their web server. The first Recieved: header in the spam
gives webserver.agn-e.net as the hostname.
So I'm trying to exploit the script to make the site blacklist itself
at dsbl.org. I found a form on the site with the action as
"/cgi-bin/formmail.cgi". If I use 'wget' on that full URL, I get a
web page back that says "formmail 1.6 by Matt Wright". However, if I
use telnet and try to GET or POST it, I'm told it doesn't exist.
Does anyone know the details for getting this to work? If it is
straightforward enough I'll make a script we can use to automate this
process.
-D
--
After you install Microsoft Windows XP, you have the option to create
user accounts. If you create user accounts, by default, they will have
an account type of administrator with no password.
-- bugtraq
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
