OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Jeremiah Grossman (jeremiahwhitehatsec.com)
Date: Tue Oct 23 2001 - 13:55:53 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    There are some cool things to be done with the mailto: protocol.

    One interesting thing I just stumbled accross was a mailto:
    embedded in a Flash File. For some reason my netscape
    browser when I click on a Flash Link that has a mailto:
    attached, it send an auto email to the destination... no warning
    at all. no other specifics yet on this...

    But if we are talking just IE or Netscape in HTML... there
    have been mailto: browser bugs have sent silent HTML.
    Most of the time you get warned now before sending an email
    prompted by HTML.

    Bill Pennington wrote:

    > So what about the mailto: URL in IE? Is there a way you could construct a
    > mailto: URL that would silently send mail to an account and attach a file?