(if this results in a 403, try reloading the whole page)

By the way, there are 1,030,000 Googlehits for filetype:pdf "for internal use only" :)

In this very simple exploit you can choose whether to post as 'title' or 'content', also, you could move the $MESSAGE to be sent as comment instead of the author's name, because that is limited in length, too. When using comment as input field you can create very long posts, with some small adjustments you could even post html and javascript to the blog. Of couse, you could execute javascript to do lots of other things with to admin's browser, too.
Thankfully, this bug among others is fixed in Wordpress 2.8.2 and above.

You'll need to generate the list on your own to really make it work for realworld harvesters. Here's some quick public domain php source you could use which produces more or less the same content:

<?php
# very quick antispam by iso from kapsobor
$phrases = array(
"contact us at ", "please write to us via ", "my email address is ",
"contact: ", "mailto:", "email address is", "please write to",
"send mail to", "NOSPAM.", "STOP.SPAM.",
);
for($i=0;$i<rand(30,50);$i++) {
$email = "";
for($j=0;$j<10;$j++) { $email .= chr(97+rand(0,25)); }
$email .= "@";
for($j=0;$j<14+rand(0,4);$j++) { $email .= chr(97+rand(0,25)); }
print $phrases[rand(0,sizeof($phrases))]. "$email.com\n";
}
?>


for moar pieces of information consult one of the following email adresses .. ;)
contact: tituopzeki@kwiqzlbxivcgrwh.com
send mail toberjgiygxj@yhvotpkmsptcaaj.com
xybtpqcjjr@tmvpxijzchhmwdme.com
NOSPAM.guvwasfisp@seokbrprcidodgyoc.com
send mail toidlkpdpeag@cxikdopdmaepsetmq.com
email address iskbgnsvciff@spgkmbwvdkphefic.com
wtlhqykrhg@dhjxqzfbpdyunp.com
STOP.SPAM.jcwqlfzibq@boleimgsiygbmwje.com
contact: zjydxhqkmw@flujsidjintaunu.com
send mail toftdzkmvdse@voqactsnwfdakyf.com
[..]

You can transfer text and even binary data by using morse-code.

The source code is available at tgtp://blog.kapsobor.de/tgtpd.pl - in case your lame browser does not support tgtp yet, you might make use of a small tgtp-client called tget [download tget]

You should try f.e. calling
chmod +x tget
./tget tgtp://blog.kapsobor.de/ > index.html
and even
./tget tgtp://blog.kapsobor.de/logo.png > logo.png will or should work.

Running your own tgtpd is pretty straight forward:
just put tgtpd.pl into any directory, create a directory called tgtpdocs in there, then run for example
perl tgtpd.pl >> tgtpd.log 2>&1 &
- and everything in the tgtpdocs-directory will be accessible via tgtp (port 7070 by the way) - as long as its filename is all lowercase and has no characters not available in common morse code :).

The morse code is only slightly extended to be able to transfer binary data. The protocol might come in handy in case you can only transfer two different bytes (or, in the current implementation, three..) and still want to comfortably serve files.
And, of course, you could always connect it to a real telegraph and use that to serve some html...

this gap is now closed, just enter your last.fm username below and you should be able to find several more or less randomly selected users which all have one thing in common: they listen to almost completely different music than you do :)

just drop it into a file, f.e. 'twit', add your username after U= and your password after P=, chmod +x twit it and off you go by f.e. by ./twit eeeoo world.

Yet, this naming scheme is quite confusing, since the only thing +s really changes - at least on ircds run by popular networks such as efnet and ircnet - is not listing the channel in /who and /list and commands alike.
Direct requests to the channelname on the other hand will reveal the info inspite of any +s oder +p modes.

Since I thought about publishing one or another irc script from my stash anyway, here is a small irc bot which will join to a specified channel and list all secret channels it finds by iterating a given wordlist - which can be quite a lot..

Download

Required

Config

Usage

License

mysql> select datediff(now(), '2009-01-01');
+-------------------------------+
| datediff(now(), '2009-01-01') |
+-------------------------------+
| 42 |
+-------------------------------+
1 row in set (0.00 sec)


mysql> select timestampdiff(day, now(), '2009-01-01');
+-----------------------------------------+
| timestampdiff(day, now(), '2009-01-01') |
+-----------------------------------------+
| -42 |
+-----------------------------------------+
1 row in set (0.00 sec)


This is more or less just as bad as all those inconsistencies among php functions with their always surprising naming and parameter order..

Openssl in s_client mode will renegotiate a connection whenever a line starts with the letter R - which is an especially bad choice when you're using it to connect to an smtp server.

So every time you try to enter RCPT the connection will be renegotiated, rendering it useless for sending mail - as a sidenote Q should also be avoided..

Since I always look it up, here it is once and for all:

openssl s_client -ign_eof -crlf -host $host -port $port