Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
From: zeno (bugtraq_at_cgisecurity.net)
Date: Thu Jan 23 2003 - 08:32:34 CST
> It seems like everyone is missing the point... Why bother going through
> the trouble setting up a page to steal someone's cookies when you can
> relay web-based attacks directly through their browser. Think of all the
Exactly. Not only that but it is possible to relay spam with this type of attack. Aka the user
opens up an email attachment with this code in it, or visits a website, and their browser
then starts spamming whoever is specified in the code. While this isn't easily done it is
Another point I'd like to make is this.
2. If I sent you an email with a attach like this the virus scanners wouldn't pick it up
therefore making the user think it is safe to open it.
3. The user opens the attachment.
4. I can send a trace to the users hotmail server and steal there login info.
(this would require a knowledge of which server they use. This can easily be done if you simply
5. With hotmail or other webmails it may also be possible to actually spam from their
Many many possibilities.