110 - POP3
Banner Grabbing
nc -nv 10.10.10.3 110
Connection
telnet 10.10.10.3 110
Capabilities of the POP3 server
nmap --script "pop3-capabilities or pop3-ntlm-info" -sV -port 110 10.10.10.3
POP Commands
| Command | Description |
|---|---|
USER uid |
Log in to the POP server using the username specified by “uid”. |
PASS password |
Provide the password specified by “password” for the current user. |
STAT |
Get the number of messages and total mailbox size in bytes. |
LIST |
List all messages with their sizes in bytes. |
RETR n |
Retrieve and display the entire message number n. |
DELE n |
Mark message number n for deletion (removed on QUIT if not reset). |
RSET |
Undo all DELE commands issued during the current session. |
QUIT |
Logout and close the connection. Executes deletions if any. |
TOP msg n |
Show header and first n lines of message number msg. |
CAPA |
List server-supported capabilities. |
Example
telnet 10.10.10.3 110
+OK beta POP3 server (JAMES POP3 Server 2.3.2) ready
USER billydean +OK PASS password
+OK Welcome billydean
list
+OK 2 1807
1 786
2 1021
retr 1
+OK Message follows
From: jamesbrown@motown.com
Dear Billy Dean, Here is your login for remote desktop ... try not to forget it this time!
username: billydean
password: PA$$W0RD!Z