method_2_recon
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
method_2_recon [2022/12/31 22:03] – [DNS Enum] gman | method_2_recon [2022/12/31 22:10] (current) – [SMTP] gman | ||
---|---|---|---|
Line 254: | Line 254: | ||
Example syntax: '' | Example syntax: '' | ||
+ | ===== SMTP ===== | ||
+ | |||
+ | **Simple Mail Transfer Protocol (SMTP):** A vintage email sending protocol. | ||
+ | * No much built in security. | ||
+ | * Runs on port 25. | ||
+ | |||
+ | You can gather info on SMTP by telnetting to the service port (25) and grabbing the banner information and then using [[https:// | ||
+ | |||
+ | < | ||
+ | telnet example.server.com 25 | ||
+ | |||
+ | # once connected, type: | ||
+ | VRFY [username] | ||
+ | # or | ||
+ | EXPN [user_alias] | ||
+ | </ | ||
+ | |||
+ | **Exploits: | ||
+ | * Connect (by telnet). Grab banner info (VRFY, EXPN). | ||
+ | * This should give you a clue as to the SMTP version on your target. | ||
===== SNMP ===== | ===== SNMP ===== | ||
method_2_recon.1672524188.txt.gz · Last modified: by gman