SMTP Smuggling - Spoofing E-Mails Worldwide

In the course of a research project in collaboration with the SEC Consult Vulnerability Lab, Timo Longin (@timolongin) - known for his DNS protocol attacks - discovered a novel exploitation technique for yet another Internet protocol - SMTP (Simple Mail Transfer Protocol). Threat actors could abuse vulnerable SMTP servers worldwide to send malicious e-mails from arbitrary e-mail addresses, allowin

[at_yasu]

\r\n.\r\n を\r.\nと。なるほど。その発想無かった。

[tmatsuu]

\r\n.\r\nのところを\r.\rとするとあら不思議。なるほどねぇ。