Requires a qpop account and gives UID mail. Bug is in the SITE EXEC command, an account is not required as anonymous access is enough. It has a flexible configuration file where you input the parameters needed to run the program and it logs sessions to textfile for easy viewing and printing. Unchecked system call in Bugzilla 2.8. Includes perl remote exploit code.
Source is well documented.
This should be more anti-IDS then the others and it can go through a firewall. It dates back to oktober 1999. But i used some cool methods in it. Elm 2.5 PL3 exploit tested under linux Slackware 3.6, 4.0, 7.0. Tested on slackware 4.0 and redhat 5.1.