Navigation :
Open Source Intelligence (OSINT)
Web Pentest
Network
- Pivot Techniques
- LDAP & DNS
-
Ports Scanning
- MAC & ARP
-
Services Enumeration
-- 21 - FTP
-- 22 - SSH
-- 25 - SMTP
-- 53 - DNS
-- 80/443 - HTTP/HTTPS
-- 110 - POP3
-- 119 - NTP
-- 135 - RPC
-- 139/445 - SMB
-- 143 - IMAP
-- 161/162 - SNMP
-- 389/636/3269 - LDAP
-- 995 - POP3S
-- 1025 - NFS/IIS
-- 1433 - MSSQL
-- 1721/500 - VPN
-- 3306 - MySQL
-- 3389 - RDP
-- 4555 - RSIP
- ICMP Tricks
Shells methods
Windows Systems
Linux Systems
Other Systems
Passcracking Hash & Files
Phishing, RedTeam and SE
Wireless
Cryptography
Pwn
Defensive, Monitoring, CTI...
External Resources
25 - SMTP
Identification
# Connection and test using telnet
telnet <IP> 25
EHLO <IP>
VRFY root
EXPN root
Mail from: me@test.com
To: root@test.com
Data:
Subject: Message
Hi,
Just a test message.
( Double carriage return )
Enumeration
# using smtp-user-enum script
smtp-user-enum -M VRFY -U users.txt -t <IP>