19楼，我又来了~
承接上回，这次找到一个新的分站：http://newmail.19lou.com/，果然，你们的邮箱已经换了
但是，你们总是为我考虑得比较周到，http://newmail.19lou.com/include/userlist.txt，所有的用户列表
直接操起BurpSuite，导入用户表，爆破
刷刷刷，300多个用户，十几秒就跑完了，根据返回时间长短确定是否登陆成功
登陆试试吧，以你们老总邮箱做证明演示吧，哈哈~如下图
密码为123456的(90个)
litao lijun yujia lishu xiayu laijun lujian xuting wangli panjin liuwei wuting lvqing xuliang daiming wangjie qiuyana renying fengxue zhanglv wanghui zhujian lvjiyong qianping chenjian xujiajin wuliping jianghui wangchen dingyika chensisi caiyijia yuanjing zhangchi wuyiting yuliqian bubinwei yujiabiao chenlufei fanchuchu zhaiwuyan lucaihong zhuyimiao qiweiqing xuyueling yinliping jiangyang renhaojie shaoyanli zhuwenchao linbanghao wuzhongmin zhaoyufeng zhangrujie chenjingya chenpeihua chenbinmei wangyihong huxiangtao luoxuanang xulingling wangxingbo mojianhong jiangzheng zhaopanpan weipengwei wanglizhen wangyunhua mamingkang wangyongmei zhangxigang xiangxiuwei chenmingjie zhengbinbin feijingjing louxinglong daitingting dingjianjun wangxiaowen zhangyiting wangzhaohui yanjianguang dengdongming zenghongyang jinzhouzheyu yangguangzhao zhangbingbing chenglongxuan huangjianmeng zhaoyufeng1203
密码为19lou的(89个)
litao lijun yujia lishu xiayu laijun lujian xuting wangli panjin liuwei wuting lvqing xuliang daiming wangjie qiuyana renying fengxue zhanglv wanghui zhujian lvjiyong qianping chenjian xujiajin wuliping jianghui wangchen dingyika chensisi caiyijia yuanjing zhangchi wuyiting yuliqian bubinwei yujiabiao chenlufei fanchuchu zhaiwuyan lucaihong zhuyimiao qiweiqing xuyueling yinliping jiangyang shaoyanli zhuwenchao linbanghao wuzhongmin zhaoyufeng zhangrujie chenjingya chenpeihua chenbinmei wangyihong huxiangtao luoxuanang xulingling wangxingbo mojianhong jiangzheng zhaopanpan weipengwei wanglizhen wangyunhua mamingkang wangyongmei zhangxigang xiangxiuwei chenmingjie zhengbinbin feijingjing louxinglong daitingting dingjianjun wangxiaowen zhangyiting wangzhaohui yanjianguang dengdongming zenghongyang jinzhouzheyu yangguangzhao zhangbingbing chenglongxuan huangjianmeng zhaoyufeng1203
密码为19lou.com的(97个)
wuqi linyu litao lijun yujia lishu xiayu baoli laijun lujian xuting wangli panjin liuwei wuting lvqing xuliang daiming wangjie qiuyana renying fengxue zhanglv wanghui wuhaibo penglin zhujian lvjiyong qianping chenjian xujiajin wuliping jianghui wangchen dingyika chensisi caiyijia yuanjing zhangshu zhangchi wuyiting yuliqian bubinwei tuwenjing yujiabiao chenlufei shiyan662 fanchuchu zhaiwuyan lucaihong zhuyimiao qiweiqing xuyueling yinliping jiangyang shaoyanli zhuwenchao linbanghao wuzhongmin zhaoyufeng zhangrujie chenjingya chenpeihua chenbinmei wangyihong huxiangtao luoxuanang xulingling wangxingbo mojianhong jiangzheng zhaopanpan weipengwei wanglizhen wangyunhua mamingkang wangyongmei zhangxigang xiangxiuwei chenmingjie zhengbinbin feijingjing louxinglong daitingting dingjianjun wangxiaowen zhangyiting wangzhaohui yanjianguang dengdongming zenghongyang jinzhouzheyu yangguangzhao zhangbingbing chenglongxuan huangjianmeng zhaoyufeng1203
细心的你应该会注意到，上面三个表中有很多账户是重复的，是的，我尝试过登陆，发现有些用户竟然可以多个密码登陆，百思不得其解~