25 - SMPT
User Enumeration
smtp-user-enum -M VRFY -U /usr/share/wordlists/metasploit/unix_users.txt -t 10.10.10.3
Connect
telnet 10.10.10.3 25
Command to check if a user exists
VRFY root
SMPT Commands
| SMTP Command | Description |
|---|---|
HELO |
Greets the SMTP server and identifies the sending host. |
EHLO |
Extended HELO; greets the server and requests a list of supported extensions. |
MAIL FROM: |
Specifies the sender’s email address. |
RCPT TO: |
Specifies a recipient’s email address. Can be used multiple times. |
DATA |
Signals the start of the email message content. |
. |
Terminates the email message data. |
QUIT |
Terminates the SMTP session. |
RSET |
Resets the current mail transaction, clearing senders and recipients. |
NOOP |
No operation; the server should respond with an OK status. |
VRFY |
Verifies the validity of a mailbox name (often disabled for security). |
EXPN |
Asks the server to expand a mailing list (often disabled for security). |