Skip to content

ESMTP - Detect

ID: esmtp-detect

Severity: info

Author: pussycat0x,userdehghani

Tags: network,detect,smtp,mail,detection,tcp

ESMTP was detected.

id: esmtp-detect
info:
name: ESMTP - Detect
author: pussycat0x,userdehghani
severity: info
description: |
ESMTP was detected.
reference:
- https://nmap.org/nsedoc/scripts/smtp-open-relay.html
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
metadata:
verified: true
max-request: 1
shodan-query: ESMTP
tags: network,detect,smtp,mail,detection,tcp
tcp:
- inputs:
- data: "\n"
host:
- "{{Hostname}}"
port: 25,2525,465,587
matchers-condition: and
matchers:
- type: word
words:
- "ESMTP Postfix"
- "220"
condition: and
# digest: 490a00463044022052b5ccea6468324b0958e6661920cf5903bbb462efcd41663832f899e84b581602204872500b09f851e181dd1ad7a6c32f016f19c5a56949ae30f20067ea98cac0ab:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "network/detection/esmtp-detect.yaml"

View on Github