CVE-2023-51764

This is a working proof-of-concept exploit for CVE-2023-51764, demonstrating SMTP smuggling in Postfix. It leverages the vulnerability to send multiple spoofed emails within a single legitimate email, bypassing SPF/DKIM/DMARC checks for the nested emails.

The repository contains two Python scripts demonstrating SMTP smuggling (CVE-2023-51764) by exploiting Postfix's handling of SMTP commands. The scripts send emails with spoofed sender addresses via ports 25 and 465, leveraging improper command injection in the email body.

This PoC demonstrates SMTP smuggling (CVE-2023-51764) by exploiting improper handling of SMTP commands to spoof emails. It sends multiple emails with forged sender addresses by manipulating the SMTP protocol flow.

This PoC exploits CVE-2023-51764, an SMTP authentication bypass vulnerability, by sending crafted AUTH PLAIN commands to spoof sender/recipient emails. It uses an Expect script to automate the interaction with the SMTP server.