# james remote admin tool

## v2.3.2

```bash
# telnet IP PORT

# default root:root

listusers
verify <user>
setpassword <user> <new-password>
# after setpassword, now can check pop3 for emails


RCE will create a new user and payload will be executed when someone logs in.
```

{% embed url="<https://github.com/am0nsec/exploit/blob/master/linux/http/ApacheJamesServer-2.3.2/apache_james_2-3-2.py>" %}
