Sendmail

• sendmail na može dati puno lijepih prilika za provalu na neeiji sistem

• provjerimo postoji li decode alias

evil % telnet victim.com 25

connecting to host victim.com (128.128.128.1.), port 25

connection open

220 victim.com Sendmail Sendmail 5.55/victim ready at Fri, 6 Nov 93 18:00 PDT

expn decode

250 <"|/usr/bin/uudecode">

quit

?

Previous slide

Next slide

Back to first slide

View graphic version