+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Metasploit exploit error (/showthread.php?tid=5873523)
Metasploit exploit error - Adam2017 - Aug 13, 2018
Hi guys I downloaded a ruby script from exploit-db.com and copied into the exploits folder of metasploit,hoping the exploit would work but I get this error message "Exploit aborted due to failure : unknown: 501 5.1.7 Bad sender address syntax "
I set the RHOST to my target metasploitable machine on my virtual network and set the MAILTO field to my email
but as above when I run the exploit I get that error,
any idea what I could be doing wrong?
thanks
RE: Metasploit exploit error - lurking - Aug 13, 2018
I'm pretty sure that's an SMTP issue? What is the goal of the script you are trying to execute & what does it abuse/use to gain you whatever (access, information, etc).
RE: Metasploit exploit error - CyberStrike - Aug 13, 2018
Generally 500 errors in SMTP are email filter issues or a bad sender address. For example you send an executable to an email address most corporate IDS will catch that type of attachment.
RE: Metasploit exploit error - f1re_w1re - Aug 13, 2018
What module are you running exactly??
RE: Metasploit exploit error - Adam2017 - Aug 14, 2018
thanks guys for the replies,
and yes I should have mentioned it is an smtp exploit
Exim < 4.90.1 - 'base64d' Remote Code Execution by straight blast
here is a description of the attack
According to its banner, the version of Exim running on the remote host is prior to 4.90.1. It is, therefore, potentially affected by a buffer overflow vulnerability. A flaw exists base64d() function due to improper validation of parsed messages. A remote attacker could potentially cause a buffer overflow condition and execute arbitrary code.
I did a port scan on my metasploitable machine to find out that prt 25 SMTP was open on it