Recent content by biggreyhat

AV = anti virus

Real reverse engineer is very hard topic which requires a lot of knowledge and dedication, but if the app is using somewhat using standard protocols and the app is not written against reverse engineering that it becomes in the realm of doable for the mortals. Take e.g. poke* go, it was easy to...

Welcome Alex.

How many recipients? How good is the list?

If you need further assistance, you know where to find me :D And if you like please thumb me up XD cheers

PM received, username is your email, password can be reset through their site (sorry I can't PM so please search with $name_of_ the_app + "request_password_change"). The server IPs can be obtained with DNS query. Once you have all that you can try to connect using an alternative client.

If you want you can either PM me or post here the app name and where I can download it, no need for IPs/user/pass.

I meant you could try to use an open source client to connect. If you don't mind at least you can share the name of the app.

If it's a standard xmpp with no proprietary extensions, you can just use any XMPP open source client connected to it, and modify the code so it will spew out the messages. If the server uses proprietary extensions then you can preform MITM attack and maybe change the app to ignore CA checks.

So is the server a standard XMPP? If so the xmpp/jabber protocol is an open protocol with publicly available specs/rfcs, what needs to be reverse engineered? Or the server using some non standar extension?

are you trying to reverse engineer the app or just the XMPP communication between the app and ther XMPP server?

Welcome mate, enjoy and have fun.

Those are leftovers from a Linux LiveCD, if there aren't any executables for your OS then it's probably just leftovers, but I can't tell you with 100% certainty without inspecting those files but you can always run AV through them. Most advanced USB hacking these days are in the firmware which...

I develop my own tools, first tier is using domain and mail server checks without any SMTP involved, 2nd tier is using SMTP to determine the validity of the inbox which is still under development. 1st tier will reduce the bounce rate drastically and 2nd tier will be almost 100% inbox delivery...

Hi I could do first tier vetting for you, remove all the obvious bad ones, this step has no SMTP involved, it will remove all address of which the domains are expired and where the domains don't accept mails. Further vetting with SMTP is also possible, but it depends on the a lot's of factors...