‫S m p p.
‫Serves on board 25 and it's used for sending and receiving emails.
‫So the service has two interesting commands that reveal information about the mail server users.
‫They are ESPN and the RF, why?
‫There are numerous ways to get names or these commands.
‫But let's go and check out the MSF auxiliaries.
‫So these auxiliary modules probe the SMTP server on the target for the version and then list the SMTP
‫server users, so you have SMTP port open on Métis, voidable to services that SMTP.
‫And here's the info.
‫SMTP verify, that's a command that helps you to check for users.
‫And before using any module, I want to show you that.
‫From the MSF console tray, you can connect s.m TV service on metastable suitable to.
‫Tell net 10 that tend to tend to five and the connections established.
‫So verify, admit there is no admin.
‫Verify Métis point, OK, no user with that name.
‫Verify MSF admin, OK, yes, so I found one username.
‫Verify route, yeah, second username.
‫Verify administrator.
‫OK, no user with that name.
‫Verify, says another correct username.
‫I think you get the point because without any vulnerability, you get usernames, exit telnet.
‫It was a great telnet.
‫OK, so, as always, search for SMTP auxiliaries.
‫And first, pick a SMTP version.
‫Show options.
‫OK, so I will set our host to tend not tend to not run for and run the module.
‫So this is the SMTP service Baner.
‫Now, let's pick another module.
‫SMTP Inam.
‫Show options.
‫And I will very quickly set our hosts.
‫So let me check if everything is fine with all the variables.
‫OK, so set threads to 10 and run the module.
‫So I think I have a problem with model execution, did you catch it because it lasts a whole lot longer
‫than it ought to.
‫So.
‫Let's set thread's one again.
‫And run the module.
‫And this time it works and here are the SMTP users.
‫So make a note of these users.
‫You're going to be able to use them and the brute force dictionaries.