Penetration Testing: SMTP & Covert Channels

["Abe Getchell" <me () abegetchell com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hey all,

As I briefly mentioned in a previous post to the list, I wrote up some
information regarding the establishment of a covert channel using the
X-Spam-Report header within the SMTP protocol. I threw up a quick blog post
about it here http://abegetchell.blogspot.com/ which includes a link to a
Perl script demonstrating the concept. I will hopefully be getting some
additional interesting stuff up on the blog within the coming weeks. Enjoy!

Abe

- --
Abe Getchell
me () abegetchell com
https://abegetchell.com/



-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.8.3 (Build 4028)
Charset: US-ASCII

wsBVAwUBSWQApxgR0SeaGdcAAQit4Af/SgwIw+UCHlvNoDI+R0qpfvpaIKuY6300
p1RFM6Hq9jvOhawPmzXhOMBNwarzRb0snSV3HlfDtbGygK7IBLqaJntBVgNSt5hP
v/Nu+xtKMAFHYrmtBUmHc3sQdmywzCB9vpJboBBGnofAlwxDqoPNsMhnV1fwQmPd
sbIlhEjnRCg3egzSwtxORAuw7iYX68Rw/RAfRlMjXoY30oQwfnO6b9IDgVDAdBYe
JkWslENElc40IOiMANOGp4pRIb2Hg/lHLIi76CADIbu/ysXatkWvHf82T9M1VzE9
uQz5Wfidvhx+QaT1UO9W/kPOMCk22AxOjs2Wkj/VLWxUENcn7XBB7A==
=iPAc
-----END PGP SIGNATURE-----