Jingo's questions

I'm trying to get a vulnerable practice ASP.NET web application (WebGoat.NET) installed on Apache Mono on Ubuntu. I've followed this guide and it all went smoothly; however, whenever I try to run the app I get this error:

The type or namespace name `log4net' could not be found. Are you missing a using directive or an assembly reference?

Log4net.dll is in the lib folder of the application directory. It's also in the /usr/lib/mono/gac directory. I'm not sure where else it needs to be. Any suggestions? Thanks!

I have shutdown Gearman, using the (echo shutdown ; sleep 0.1) | netcat 127.0.0.1 4730 -w 1 command. I've also stopped Supervisor using /etc/init.d/supervisord stop. However, when I run a ps -aux, there are Gearman workers still running (i.e. /usr/bin/php gearmanworker.php). If i try to kill the worker, a new one is spawned immediately afterwards. Is there another database or something I must wipe to properly shutdown Gearman and its workers?

Any help is much appreciated - thanks!

I'm trying to configure sendmail to prevent it from allowing username enumeration through the RCPT TO: command.

I've been googling endlessly and, from what I can see, the best way to achieve this is by adding a catch all email account to the virtusertable.

So I generated a new sendmail.cf file, with this directive included:

FEATURE(`virtusertable', `hash /etc/mail/virtusertable')dnl     

To the virtusertable.db file, I then add:

@ubuntu test

and restart sendmail, but it doesn't work:

mail from:root@ubuntu
250 2.1.0 root@ubuntu... Sender ok
rcpt to:root 
250 2.1.5 root... Recipient ok
rcpt to:fake
550 5.1.1 fake... User unknown

Am I going wrong somewhere? Or is there a better way to achieve this?

Thanks for any help