James Remote Admin Tool

The James Remote Adminitration has the default credentials root:root.

~kjiwa: Exploiting Apache James 2.3.2

This tool allows us to change the passwords of the mail server, by changing these passwords we can read the user mails from the POP service.

Notice with the screenshot below we can also change passwords and we could end up reading their emails.

Users

Changed the passwords using the following command.

Time to read emails!