Files
nuclei-templates/network/enumeration/smtp/smtp-user-enum.yaml
2024-12-01 13:57:55 +00:00

41 lines
987 B
YAML

id: smtp-user-enum
info:
name: SMTP User Enumeration
author: pussycat0x,userdehghani
severity: medium
description: |
enumerate the users on a SMTP server by issuing the VRFY/EXPN commands
reference:
- https://nmap.org/nsedoc/scripts/smtp-enum-users.html
metadata:
verified: true
max-request: 1
shodan-query: smtp
tags: network,enum,smtp,mail,tcp
tcp:
- inputs:
- data: "VRFY {{useraccounts}}\n"
read: 1024
- data: "EXPN {{useraccounts}}\n"
read: 1024
host:
- "{{Hostname}}"
port: 25,2525,465,587
attack: batteringram
payloads:
useraccounts:
- msfadmin
- admin
- root
matchers:
- type: word
words:
- "252"
- "250"
condition: or
# digest: 4a0a0047304502200f4ef757131bf7cf16a8461597c0e3f5877b0a934381c09d0e93325cd45bb990022100c00723d2233d4ba758c2f90525135e7f389c40a4c089a1e3fa352c33a257a9cd:922c64590222798bb761d5b6d8e72950