OpenSMTPD < 6.6.2

GitHub - QTranspose/CVE-2020-7247-exploit: OpenSMTPD 6.4.0 - 6.6.1 Remote Code Execution PoC exploitGitHub

Remember that root@localhost is still a local user because it exists within SMTP.

If for whatever reason this exploit does not work you can give the exploitdb one a shot.

OpenSMTPD 6.6.1 - Remote Code ExecutionExploit Database

Notice the syntax

Examples

https://app.gitbook.com/s/UlbUGvFgNk6Fya0ukCCt/exploitation (Bratarina)