ClamAV_SMTP

SMTP

---

Nmap discovered a SMTP server on the target port 25 The running service is Sendmail 8.13.4/8.13.4/Debian-3sarge3

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/clamav]
└─$ telnet $IP 25
Trying 192.168.236.42...
Connected to 192.168.236.42.
Escape character is '^]'.
220 localhost.localdomain ESMTP Sendmail 8.13.4/8.13.4/Debian-3sarge3; Sat, 22 Mar 2025 14:54:44 -0400; (No UCE/UBE) logging access from: [192.168.45.192](FAIL)-[192.168.45.192]
HELO x
250 localhost.localdomain Hello [192.168.45.192], pleased to meet you
EHLO all
250-localhost.localdomain Hello [192.168.45.192], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-EXPN
250-VERB
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-DELIVERBY
250 HELP
HELP
214-2.0.0 This is sendmail version 8.13.4
214-2.0.0 Topics:
214-2.0.0 	HELO	EHLO	MAIL	RCPT	DATA
214-2.0.0 	RSET	NOOP	QUIT	HELP	VRFY
214-2.0.0 	EXPN	VERB	ETRN	DSN	AUTH
214-2.0.0 	STARTTLS
214-2.0.0 For more info use "HELP <topic>".
214-2.0.0 To report bugs in the implementation send email to
214-2.0.0 	sendmail-bugs@sendmail.org.
214-2.0.0 For local information send email to Postmaster at your site.
214 2.0.0 End of HELP info

• Sendmail 8.13.4
• Supported commands

VRFY root
250 2.1.5 <root@localhost.localdomain>
EXPN root
250 2.1.5 root <root@localhost.localdomain>

Both VRFY and EXPN commands can be used to enumerate users