Hello everyone. So in this
video we are going to see the nmap SMTP backdoor
detect scan.
So here you will be able to find out if the target
server is running a SMTP backdoor or
not.
The syntax of doing this scan is nmap. The
target IP followed by -script equals
to SMTP - strange port
so you can scan a Target and you can identify if it
is a back door by running this particular NEC
script. You can always add hyphen V
to see the output in verbose mode and
the example of running. This can is given over here.
So it is the Practical time and let's see.
How we can perform and detect SMTP
back doors e over here.
This is the particular syntax that
we are going to use which is nmap hyphen
SV the port.
Smdp Port the script that we are going
to use and the target server. This is the back door
script and you can see when I run this particular
scan. Then I have identified then instead
of 25. This particular server is
running SMTP on Port 26 and
it is unusual port.
Generally SMTP service are by
default configured on Port 25 only but this
was unusual Port so nmap has
flagged at as a possible malware. It
can be a back door, which is running a part
from the default SMTP configuration
on Port 25.
We have also identified the host which
is being used is hacker udme.com for sending
and receiving the emails.
So I hope you guys understood how you can detect back
doors on web servers like
this. Thank you.