[From nobody Thu Jul 10 02:06:38 2008
X-Account-Key: account6
Return-Path: <baiyuanfan@gmail.com>
Received: from boulder.mail.gatech.edu ([unix socket])
	by boulder.mail.gatech.edu (Cyrus v2.1.18) with LMTP;
	Fri, 09 Feb 2007 12:25:09 -0500
X-Sieve: CMU Sieve 2.2
Received: from deliverator6.gatech.edu (deliverator6.prism.gatech.edu
	[130.207.171.126])
	(using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits))
	(Client CN "deliverator6.gatech.edu",
	Issuer "Tech Support CA" (verified OK))
	by boulder.mail.gatech.edu (Postfix) with ESMTP id 997046EC8FF
	for <mflaschen3@boulder.mail.gatech.edu>;
	Fri,  9 Feb 2007 12:25:09 -0500 (EST)
	(envelope-from baiyuanfan@gmail.com)
Received: from deliverator6.gatech.edu (localhost [127.0.0.1])
	by localhost (Postfix) with SMTP id 262DB19EA
	for <matthew.flaschen@gatech.edu>; Fri,  9 Feb 2007 12:25:09 -0500 (EST)
	(envelope-from baiyuanfan@gmail.com)
Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.184])
	by deliverator6.gatech.edu (Postfix) with ESMTP id 102911864
	for <matthew.flaschen@gatech.edu>; Fri,  9 Feb 2007 12:25:07 -0500 (EST)
	(envelope-from baiyuanfan@gmail.com)
Received: by nf-out-0910.google.com with SMTP id x4so1274622nfb
	for <matthew.flaschen@gatech.edu>; Fri, 09 Feb 2007 09:25:07 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta;
	h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references;
	b=hq6M4R6TCef6L4Cb9oQ0a+fPx69pOrA+JAI6oniSpc3UUq0KKee+fJ/I/p9xiAB60Mtu/J4E1avDhRaCOaVAQpRGMEBIN+ar3o6i7mFaV56egOKJWcIvJKDHMk85/m8ZKeUjETPGyeDRKVFnxT7I5WX/T8GKUcf17nN1p7aVHCg=
Received: by 10.82.186.5 with SMTP id j5mr4983224buf.1171041906933;
	Fri, 09 Feb 2007 09:25:06 -0800 (PST)
Received: by 10.49.49.3 with HTTP; Fri, 9 Feb 2007 09:25:06 -0800 (PST)
Message-ID: <30bcd0d10702090925q71cb568fp4ed17575caf3d866@mail.gmail.com>
Date: Sat, 10 Feb 2007 01:25:06 +0800
From: "yuanfan bai" <baiyuanfan@gmail.com>
To: "Matthew Flaschen" <matthew.flaschen@gatech.edu>
Subject: Re: [Full-disclosure] Full functional 0day exploit builder for sale!
In-Reply-To: <45C6D9D1.8090004@gatech.edu>
MIME-Version: 1.0
Content-Type: multipart/alternative; 
	boundary="----=_Part_65986_3846209.1171041906857"
References: <BAY108-F339DB77BEA1B647C998D03F9990@phx.gbl>
	<45C6D9D1.8090004@gatech.edu>
X-GT-Spam-Rating: (7%)
X-GT-Spam-Details: No antispam rules were triggered by this message
X-GT-AVAS-Version: 5.3.0.289146, Antispam-Engine: 2.5.0.283055,
	Antispam-Data: 2007.2.9.90934

------=_Part_65986_3846209.1171041906857
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi List.
    I am that a0daydealer@hotmail.com. I donot know why my hotmail account
password was changed by someone, maybe ones here. Now I should claim here, I
am NOT a technical hacker or resercher. I donot know such magics. I am just
a bussinessman. I provide my 0day builder to customers. So anyone, attacking
my mailbox is not so interesting.
   And I'm sorry that I hope anyone contacted me in the last two days,
resend your un-replied letters to the new box: this gmail mailbox. I'm
sorry, thank you.






2007/2/5, Matthew Flaschen <matthew.flaschen@gatech.edu>:
>
> 0dayDealer 0dayDealer wrote:
> > Hi List,
> >    Full functional 0day exploit builder for sale!
> >
> >    This is the one you want. Contact me with the mailbox
> > A0dayDealer###hotmail.com.
> > Here is some of the exploits: 0day word2003 all languages universal
>
> How can you have a 0-day on a program that's been completely replaced?
>
> Matthew Flaschen
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>

------=_Part_65986_3846209.1171041906857
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

<div>Hi List.</div>
<div>    I am that <a href="mailto:a0daydealer@hotmail.com">a0daydealer@hotmail.com</a>. I donot know why my hotmail account password was changed by someone, maybe ones here. Now I should claim here, I am NOT a technical hacker or resercher. I donot know such magics. I am just a bussinessman. I provide my 0day builder to customers. So anyone, attacking my mailbox is not so interesting.
</div>
<div>   And I'm sorry that I hope anyone contacted me in the last two days, resend your un-replied letters to the new box: this gmail mailbox. I'm sorry, thank you.</div>
<div> </div>
<div> </div>
<div> </div>
<div><br><br> </div>
<div><span class="gmail_quote">2007/2/5, Matthew Flaschen <<a href="mailto:matthew.flaschen@gatech.edu">matthew.flaschen@gatech.edu</a>>:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">0dayDealer 0dayDealer wrote:<br>> Hi List,<br>>    Full functional 0day exploit builder for sale!<br>
><br>>    This is the one you want. Contact me with the mailbox<br>> A0dayDealer###hotmail.com.<br>> Here is some of the exploits: 0day word2003 all languages universal<br><br>How can you have a 0-day on a program that's been completely replaced?
<br><br>Matthew Flaschen<br><br><br>_______________________________________________<br>Full-Disclosure - We believe in it.<br>Charter: <a href="http://lists.grok.org.uk/full-disclosure-charter.html">http://lists.grok.org.uk/full-disclosure-charter.html
</a><br>Hosted and sponsored by Secunia - <a href="http://secunia.com/">http://secunia.com/</a><br><br></blockquote></div><br>

------=_Part_65986_3846209.1171041906857--

]