owtf icon indicating copy to clipboard operation
owtf copied to clipboard

plugin for IMAP_SMTP injection check

Open ph1ne4s opened this issue 1 year ago • 2 comments

This plugin is to verify the capacity to inject arbitrary IMAP/SMTP commands into the mail servers, due to input data not being properly sanitized.

Description

The command-injection-tester python tool allows for straightforward testing of email servers for the STARTTLS command injection vulnerability in SMTP, POP3, and IMAP.

Reviewers

@viyatb

Types of changes

  • [ ] Bug fix (non-breaking change which fixes an issue)
  • [ x] New feature (non-breaking change which adds functionality)
  • [ ] Breaking change (fix or feature that would cause existing functionality to change)
  • [ ] Other

Checklist:

  • [ x] My code follows the code style (modified PEP8) of this project.
  • [ ] My change requires a change to the documentation.
  • [ ] I have updated the documentation accordingly.

ph1ne4s avatar Jul 07 '23 21:07 ph1ne4s

can you fix the merge conflict? I think I merged your other PR first.

viyatb avatar Jul 24 '23 17:07 viyatb

can you fix the merge conflict? I think I merged your other PR first.

done

ph1ne4s avatar Jul 25 '23 19:07 ph1ne4s