SMTP Port (25)
Identify hosts running SMTP.
nmap -sV -p 25,465,587 <IP> --openIdentify available SMTP commands.
nmap --script smtp-commands -p25 <IP>Those above script will identify all commands. The following below can be used to grep for methods to be used with smtp-user-enum for user identification.
nmap --script smtp-commands -p25 <IP> | grep -Eo 'VRFY|EXPN|RCPT'
With verified methods smtp-user-enum can be used to identify users from a given word list.
Metasploit
Sending Emails
Last updated