教程user enum用户ssmtp枚举.pdfVIP

1Overview

smtp-user-enumisatoolforenumeratingOS-leveluseraccountsonSolarisvia

theSMTPservice(sendmail).Enumerationisperformedbyinspectingthe

responsestoVRFY,EXPNandRCPTTOcommands.Itcouldbeadaptedto

workothervulnerableSMTPdaemons,butthishasn’tbeendoneasof

v1.0.

2Installation

smtp-user-enumisjustastandalonePERLscript,soinstallationisassimple

ascopyingittoyourpath(e.g./usr/local/bin).Ithasonlybeentestedunder

Linuxsofar.

ItdependsonthefollowingPERLmoduleswhichyoumayneedtoinstall

first:

•Socket

•IO::Handle

•IO::Select

•IO::Socket::

•Getopt::Std

IfyouhavePERLinstalled,youshouldbeabletoinstallthemodulesfrom

CPAN:

#perl-MCPAN-es

cpaninstallGetopt::Std

2

3Usage

smtp-user-enumsimplyneedstobepassedalistofusersandatleastarget

runninganSMTPservice.

smtp-user-enumv1.0()

Usage:smtp-user-enum.pl[options](-uusername|-Ufile-of-usernames)(-thost|-Tfile-of-targets)

optionsare:

-mnumnumberofprocesses(default:5)

-MmodeMethodtouseforusernameguessingEXPN,VRFYorRCPT(default:VRFY)

-uuserCheckifuserexistsonremotesystem

-faddrFromaddresstouseforRCPTTOguessing(default:user@)

-UfileFileofusernamestocheckviasmtpservice

-thostServerhostrunnintpservice

-TfileFileofhostnamesrunningthesmtpservice

-pportTCPportonwhichsmtpserviceruns(default:25)

-dDebuggingoutput

-tnWaitaumofnsecondsforreply(default:5)

-vVerbose

-hThis