S m p p.
Serves on board 25 and it's used for sending and receiving emails.
The service has two interesting commands that reveal information about the mail server users.
They are ESPN and the RF, why?
There are numerous ways to get names or these commands.
But let's go and check out the MSF auxiliaries.
So these auxiliary modules probe the SMTP server on the target for the version and then list the SMTP
server users, so you have assumptive port open on meds, voidable to.
Services that SMTP and here's the info.
SMTP verify, that's a command that helps you to check for users.
And before using any module, I want to show you that.
From the MSF console tray.
You can connect s.m TV service on metastable suitable to.
Telnet 10 dot tend to dot, tend to five and the connections established.
So verify, admit there is no admin.
Verify Métis point, OK, no user with that name.
Verify MSF admin, OK, yes, so I found one username.
Verify route, yeah, second username.
Verify administrator.
OK, no user with that name.
Verify and another correct username, I think he get the point, because without any vulnerability,
you get usernames, exit telnet.
It was great telnet.
OK, so, as always, search for SMTP auxiliaries.
And first, pick a SMTP version.
Show options.
OK, so I will set our host to tend not tend to doubt one four and run the module.
So this is the SMTP service Baner.
Now, let's pick another module.
SMTP Inam.
Show options.
And I will very quickly set our hosts.
So let me check if everything is fine with all the variables.
OK, so set threads to 10 and run the module.
So I think I have a problem with module execution, did you catch it?
Because it lasts a whole lot longer than it ought to.
So.
Let's set thread's one again.
And run the module.
And this time it works.
And here are the SMTP users.
So make a note of these users.
You're going to be able to use them and the brute force dictionaries.