[tor-bugs] #6383 [Flashproxy]: Email registration helper

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Tue Sep 11 06:39:45 UTC 2012


#6383: Email registration helper
------------------------+---------------------------------------------------
 Reporter:  dcf         |          Owner:  dcf
     Type:  defect      |         Status:  new
 Priority:  normal      |      Milestone:     
Component:  Flashproxy  |        Version:     
 Keywords:              |         Parent:     
   Points:              |   Actualpoints:     
------------------------+---------------------------------------------------

Comment(by dcf):

 > But unfortunately, on first investigation this incoming SMTP doesn't
 support TLS, so our messages will be blockable just by grepping for
 whatever designated address we use.

 Ignoring the lack of TLS, here is a proof of concept for determining our
 external IP address and sending it in email to a Gmail address:

 {{{
 import re
 import smtplib
 import sys

 smtp = smtplib.SMTP("gmail-smtp-in.l.google.com.", 25, "[127.0.0.1]")
 smtp.set_debuglevel(1)

 # Grep the EHLO response for our public IP address.
 smtp.ehlo()
 m = re.search(r'at your service, \[([\d.]+)\]', smtp.ehlo_resp)
 if not m:
     print >> sys.stderr, "Could not determine external IP address."
     sys.exit(1)
 client_spec = m.group(1)

 smtp.sendmail("hoddwee at gmail.com", "hoddwee at gmail.com", """\
 From: hoddwee at gmail.com
 To: hoddwee at gmail.com
 Subject: Flash proxy client registration

 client=%s
 """ % client_spec)
 smtp.quit()

 print "Registered %s." % client_spec
 }}}

 The messages end up in the spam folder, probably because we lack the
 authentication headers that gmail.com senders are supposed to have.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6383#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list