Re: Last call for smtp-open-relay.nse - help needed

[David Fifield <david () bamsoftware com>]

On Tue, Mar 02, 2010 at 09:34:24PM +0000, Duarte Silva wrote:
> They are running the qmail SMTP server
> (http://pobox.com/~djb/qmail.html). The script end result is the
> following
>
> 25/tcp open  smtp    syn-ack
> | smtp-enum-users:
> |_  ERROR: Couldn't find any account names
>
> The smtp server does not implement EXPN but it does implement VRFY.
> The VRFY always return
>
> 252 send some mail, i'll try my best..

Ha ha, yeah, qmail is the server I would least expect to fall to this
script. The author wrote a short page about it:
http://cr.yp.to/smtp/vrfy.html.

I'd like to add the script. I just want someone to test it and
successfully enumerate a user, to make sure those code paths work.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/