Identify hosts running SMTP.
Copy nmap -sV -p 25,465,587 < I P > --open Identify available SMTP commands.
Copy nmap --script smtp-commands -p25 <IP> Those above script will identify all commands. The following below can be used to grep for methods to be used with smtp-user-enum for user identification.
Copy nmap --script smtp-commands -p25 <IP> | grep -Eo 'VRFY|EXPN|RCPT'
Copy smtp-user-enum -U <Word-list> -M VRFY -t <IP>
Copy use auxiliary/scanner/smtp/smtp_enum
Copy # mutt
echo "<Body>" | mutt -s "<Subject>" < Recipien t > -r < Recipien t > -a < Attachmen t >
# SendEmail
sendEmail -t < Recipien t > -f < SendingAddres s > -s < I P > -u < Subjec t > -a < Attachmen t >
# Swaks
swaks -s "<Server>" -t "<Recipient>" -f "<FromAddress>" --header "Subject:" --body "" --attach < Attachmen t > 
