SMTP


Nmap discovered a SMTP server running on the target port 25 The service running is Postfix smtpd

┌──(kali㉿kali)-[~/archive/htb/labs/sneakymailer]
└─$ nc $IP 25
220 debian ESMTP Postfix (Debian/GNU)
EHLO all
250-debian
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250-SMTPUTF8
250 CHUNKING

I see that the SMTP server allows a few commands While key commands for enumeration are missing, I can probably use the VRFY command to check for valid usernames