re: Tools or resources for email/MIME fuzzing?

From: dan berbPEN (dberb.pentest@gmail.com)
Date: Tue Jul 03 2007 - 11:14:32 EDT


Lynx - I came across the same problem, needing a MIME fuzzer. I looked
around and found nothing, so decided to write one. Sadly, it was at
and for work - so you know how that goes for a founded in the 1950's
tech company.
What I can tell you is that it was pretty easy in python, there is
already an accessible MIME module with which you can do some pretty
messed up things: insert 10,000 X-Headers, make the boundary 100,000
characters long, put illegeal media type mappings 'image/ogg' ...
lots of fun stuff, with loops!
Good Luck.

Hello!

I've been dealing with a couple of projects concerning email security. I
wrote a simple MIME fuzzer for testing purposes. When looking for
resources about malformed emails I came across a project that was
collecting samples of malformed emails for the purpose of testing email
filters and applications. Unfortunately I forgot the URL. Does anyone
know of projects that archive such emails?

Best,
Lynx.

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Swap Out your SPI or Watchfire app sec solution for
Cenzic's robust, accurate risk assessment and management
solution FREE - limited Time Offer

http://www.cenzic.com/wf-spi
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:55 EDT