# James Remote Admin Tool

The James Remote Adminitration has the default credentials root:root.

{% embed url="https://crimsonglow.ca/~kjiwa/2016/06/exploiting-apache-james-2.3.2.html" %}

This tool allows us to change the passwords of the mail server, by changing these passwords we can read the user mails from the POP service.&#x20;

![](https://1969294183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXeJGW7fniDYPpAiztsZC%2Fuploads%2FHz0ururjsFpR8DPwBYFI%2F2022-08-22_11-56.png?alt=media\&token=a44e8bb4-4a3a-481b-9ac7-bd085f3eea40)

Notice with the screenshot below we can also change passwords and we could end up reading their emails.&#x20;

![](https://1969294183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXeJGW7fniDYPpAiztsZC%2Fuploads%2FPh9eMMaX2bnUHnVUu0NT%2F2022-08-22_11-53.png?alt=media\&token=e9fc731f-2dcc-41f0-bd6f-ce8f4c46a3f0)

#### Users

![](https://1969294183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXeJGW7fniDYPpAiztsZC%2Fuploads%2FwrWLGRlB8EkxPswleRKv%2F2022-08-22_11-51.png?alt=media\&token=1a6624b5-40cb-4adc-a503-7446e3f2de5d)

Changed the passwords using the following command.&#x20;

![](https://1969294183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXeJGW7fniDYPpAiztsZC%2Fuploads%2FiUiCcDIYAwoi3VRjrha8%2F2022-08-22_11-58.png?alt=media\&token=c3ff0a56-dd0c-43be-9dcc-d4866e7f4624)

Time to read emails!&#x20;
