Technique
technique:smtp_enumeration
Also: email enumeration
Technique for identifying valid email addresses on a domain using SMTP behavior and the VRFY command.
Technique for identifying valid email addresses on a domain using SMTP behavior and the VRFY command.
“we used SMTP enumeration on his domains”
“you can verify if an e-mail is valid by using the VRFY command”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | The Guild of the Grumpy Old Hackers | Explicit | 87 |
| incoming | USES | Metasploit | Explicit | 87 |
The Guild of the Grumpy Old Hackers USES SMTP enumeration
The Guild used SMTP enumeration on Trump's domains to identify valid email addresses.
Explicit Confidence 99% · Victor EP 87 Details
“we used SMTP enumeration on his domains, over the e-mail domains.”
Metasploit USES SMTP enumeration
Jack explains that Metasploit can perform SMTP enumeration.
Explicit Confidence 99% · Jack Rhysider EP 87 Details
“It’s called Metasploit and Metasploit can do a lot of things.”
“one thing it can do is SMTP enumeration”