File smtp-brute

脚本使用类型: portrule
脚本所属分类: brute, intrusive
脚本下载地址: http://nmap.org/svn/scripts/smtp-brute.nse

User Summary

Performs brute force password auditing against SMTP servers using either LOGIN, PLAIN, CRAM-MD5, DIGEST-MD5 or NTLM authentication.

Script Arguments

smtp-brute.auth

authentication mechanism to use LOGIN, PLAIN, CRAM-MD5, DIGEST-MD5 or NTLM

passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

Example Usage

执行格式

nmap -p 25 --script smtp-brute <host>

Script Output

PORT    STATE SERVICE REASON
25/tcp  open  stmp    syn-ack
| smtp-brute: 
|   Accounts
|     braddock:jules - Valid credentials
|     lane:sniper - Valid credentials
|     parker:scorpio - Valid credentials
|   Statistics
|_    Performed 1160 guesses in 41 seconds, average tps: 33

Requires

• brute
• coroutine
• creds
• shortport
• smtp
• stdnse

Author: Patrik Karlsson

License: VER007 整理 http://www.ver007.com