Back to Port Tracker
✉️

SMTP

Port 25 / 465 / 587Misc

Mail transfer — enumerate users via VRFY/EXPN/RCPT, test open relay.

// methodology checklist

Step-by-step commands

1

Service scan

howlsec@kali·shell
nmap -p25,465,587 -sV -sC $t
howlsec@kali·shell
nmap -p25 --script smtp-commands,smtp-enum-users,smtp-open-relay $t
2

User enumeration

howlsec@kali·shell
smtp-user-enum -M VRFY -U users.txt -t $t
howlsec@kali·shell
smtp-user-enum -M RCPT -U users.txt -t $t