Hello everyone in this video. We are
going to see how you can Brute Force
the SMTP passwords and you can do the
password attack.
The syntax of doing this particular scan is and map
the target IP address followed by hyphen hyphen
script equals to SMTP route.
Remember, this is a type of intrusive scan
in which we are going to Brute Force the username and
password. Once we get the username and
password then we can attack the SMTP server
and send emails to anyone
we want.
So you will be able to Brute Force
the username and password of the users running on a particular
Target SMTP server.
You can always add hyphen V to see the output in verbose mode
and the example of doing this particular scan is
given over here.
Which consists of nmap the target IP followed
by the NEC script, which is SMTP hyphen
Brute.
So it is the Practical time and let's see, how can
we run this particular attack?
As you can see I have written the enumerate
and SMTP Brute Force
script. I'm going to use this.
I will just copy this and go on to my terminal.
So first, I'm going to see if SMTP exist
on the target web server or not.
So I am running a fast scan
on to that particular Target to see if SMTP
is running on or not.
As you can see the scan has successfully completed and we
find that SMTP is successfully running onto
that particular Target.
Then we run our Brute Force script which you can
see over here on Port 25.
And let's see the output of that particular script as
you can see the output is no valid accounts found
because I have not set it up
a user and a password for the SMTP account.
If you will set up a username and password,
then you can see the valid credentials will
be fine.
mostly
If those credentials are default credentials,
like root root and management sysadmin,
etc. Those are generally
weak and can be Brute Force like this.
But in case if you want to
give your custom word list, you can also modify and you
can give the script args and you can give
your custom word list. You can check for giving the
script asks on the end map website for this
particular script, which is SMTP brute. We
have already seen.
the same way in FTP root
You can give the same arguments over here
as well.
So we did not find any valid accounts, but we
have found out that the hostname which has been used
for sending emails as hacker. Udemy.com.
So I hope you guys understood how you can perform this
particular scan and you can find the username
and password of weekly configured
servers. Thank you.