Script smtp-commands

Script types: portrule
Categories: default, discovery, safe
Download: https://svn.nmap.org/nmap/scripts/smtp-commands.nse

Script Summary

Attempts to use EHLO and HELP to gather the Extended commands supported by an SMTP server.

Script Arguments

smtp.domain

or smtp-commands.domain Define the domain to be used in the SMTP commands.

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

See the documentation for the smbauth library.

Example Usage

nmap --script smtp-commands.nse [--script-args smtp-commands.domain=<domain>] -pT:25,465,587 <host>

Script Output 

PORT   STATE SERVICE REASON  VERSION
25/tcp open  smtp    syn-ack Microsoft ESMTP 6.0.3790.3959
| smtp-commands: SMTP.domain.com Hello [172.x.x.x], TURN, SIZE, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, X-EXPS GSSAPI NTLM LOGIN, X-EXPS=LOGIN, AUTH GSSAPI NTLM LOGIN, AUTH=LOGIN, X-LINK2STATE, XEXCH50, OK
|_ This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY

Requires

Author:

  • Jasey DePriest

License: Same as Nmap--See https://nmap.org/book/man-legal.html