[Full-disclosure] Ask for spam...
michael.holstein at csuohio.edu
Mon Oct 16 19:53:31 BST 2006
Here's what I did when researching the same thing ...
Google "free stuff". Find a page with "thousands of free offers". Fill
one out and check *every* box. Reply to whatever "confirm" emails come in.
I did a few of those "thousand freebie" things to various bogus email
addresses in a fake subdomain and was getting thousands per day (and it
wasn't long until the DHA attacks started on that newly created
subdomain either -- configure your first-touch MTA to blindly accept
anything as valid if you're curious, just be careful not to relay it).
The nice thing about doing the subdomain trick is you can just delete
the subdomain when you're done and not waste your bandwidth (and disk
space) dealing with "test" SPAM.
Michael Holstein CISSP GCIA
Cleveland State University
Full-Disclosure is hosted and sponsored by Secunia.