PoC for CVE-2023-51764 SMTP SMUGGLING Postfix

CVE-2023-51765_25.py

Description

This script allows sending messages using port 25 of the mail server.

Usage

Before running, modify the variables:

• smtp_server - address of the mail server
• from_address - sender of the first email
• to_address - recipient of the first email
• username - login for authentication
• password - password for authentication
• body - message
• • The message body contains two variables
  • mail FROM - address of the fake sender
  • rcpt TO - address of the actual recipient

Run with command: python3 CVE-2023-51765_25.py

Script output

Delivered messages

CVE-2023-51765_465.py

Description

This script allows sending messages using port 465 of the mail server.

Usage

Before running, modify the variables:

• smtp_server - address of the mail server
• from_address - sender of the first email
• to_address - recipient of the first email
• username - login for authentication
• password - password for authentication
• body - message
• • The message body contains two variables
  • mail FROM - address of the fake sender
  • rcpt TO - address of the actual recipient

Run with command: python3 CVE-2023-51765_25.py

Script output

Delivered messages