Post

SMTP

Pentesting on SMTP

Posted
By Avinash Kattamanchi
1 min read
SMTP

SMTP Protocol

SMTP - 25

  • SMTP (Simple Mail Transfer Protocol) is a TCP/IP protocol used in sending and receiving email. SMTP is used most by email clients, including Gmail, Outlook, Apple Mail and Yahoo Mail. SMTP can send and receive email, but email clients typically use a program with SMTP for sending email.
  • The default Port number is 25.

1. The Mail server accepts the VRFY and EXPN commands.

Step 1: Go to the Command Prompt. Step 2: Connect to the IP address by entering the following command:

1

telnet <target iP> 25

Step 3: Then, enter the following command:

EXPN root

VRFY root Step 4: The following screenshot shows that the EXPN and VRFY commands are supported by the Mail server and users present on the server can be verified using these commands.

Screenshot 24

2. SMTP Open Mail Relay

Case 1: Internal to Internal user Step 1: Open the “Swaks” tool and enter the following command in Command Prompt:

Screenshot 25

Case 2: External to Internal user Open the “Swaks” tool and enter the following command in Command Prompt:

1

Swaks --server <IP> --from [email protected] --to [email protected] --body "You are hacked”.

Screenshot 26

Note: There is other 2 Possible cases are.

• Internal to External User • External to External User

RedTeam, Ports
Pentest Redteam
This post is licensed under CC BY 4.0 by the author.