View source for Port 25

<syntaxhighlight lang="shell">
nc -nvv 10.11.1.111 25
HELO foo
</syntaxhighlight><syntaxhighlight lang="shell">
telnet 10.11.1.111 25
VRFY root
</syntaxhighlight><syntaxhighlight lang="shell">
nmap --script=smtp-commands,smtp-enum-users,smtp-vuln-cve2010-4344,smtp-vuln-cve2011-1720,smtp-vuln-cve2011-1764 -p 25 10.11.1.111
</syntaxhighlight><syntaxhighlight lang="shell">
smtp-user-enum -M VRFY -U /root/sectools/SecLists/Usernames/Names/names.txt -t 10.11.1.111
</syntaxhighlight>

* SMTP relay
<syntaxhighlight lang="shell">
msfconsole
use auxiliary/scanner/smtp/smtp_relay
set RHOSTS <IP or File>
set MAILFROM <PoC email address>
set MAILTO <your email address>
run
</syntaxhighlight>

* Send email unauth:
<syntaxhighlight lang="shell">
MAIL FROM:admin@admin.com
RCPT TO:DestinationEmail@DestinationDomain.com
DATA
test
.
Receive:
250 OK
</syntaxhighlight>

== Source ==

* [https://pentestbook.six2dez.com/enumeration/ports six2dez.com]