$0x80be240, which contains "533 5.1.0 prescan: token too long" got into esp,
and then it calls usrerr that sends us the error.
but when i'm trying to break on 0x807a901 for example,
gdb wont stop.
i suppose it fork() somewhere,
but how can i debug the sub proccess?
also i know that the "rcpt to: " command to server should contain
"rcpt to: < [256 retaddr] [x "\xff\x5c"] [CR] [shellcode] >"
< from
atomix's message on that topic >
i saw that my PVPBUF is 256 + 1000 (?) length.
i also dont fully understand what is the "\xff\x00\xff\x5c",
i read about it, but dunno yet the diff between pvpbuf and ebp coz i can't debug it.
btw i'm using Sendmail 8.12.8 on Gentoo.
10x 2 all helpers