Penetration Testing mailing list archives
RE: e-mail address mining tool?
From: "Eyal Udassin" <eyal () swiftcoders com>
Date: Sun, 6 Nov 2005 19:36:48 +0200
Hello Hugo, I'm not aware of any tool which can test emails against an address file. The most efficient approach to achieve this functionality is to write a simple script which sends the SMTP VRFY command for each entry in an address file. Note that some mail servers do not support this command in order to thwart spammers. Regards, Eyal Udassin - Swift Coders POB 1596, Ramat Hasharon, Israel eyal () swiftcoders com / www.swiftcoders.com +972-547-684989 -----Original Message----- From: Hugo Vinicius Garcia Razera [mailto:hviniciusg () gmail com] Sent: Saturday, November 05, 2005 12:13 AM To: pen-test () securityfocus com Subject: e-mail address mining tool? Hello list. First off all congratulate every one for always sharing their knowledge for free and for the... well lets get to the point :) I'm wondering if any one knows a tool that can gather email addresses of the users inside a domain, from the email server. For example: When u connect to a mail server trough telnet And u enter the commands Helo Mail from: xxxx () something com Rcpt to: xxxx () something com Etc..... U can see if the address xxxx () something com is a valid email. I was thinking in something that uses like a dictionary off names and then test all off them. I was wondering if there is such tool so I don't have to reinvent the wheel. I hope I make mi self clear. Best regards Hugo Vinicius Garcia Razera Security Consultant ---------------------------------------------------------------------------- -- Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 ---------------------------------------------------------------------------- --- ------------------------------------------------------------------------------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
Current thread:
- e-mail address mining tool? Hugo Vinicius Garcia Razera (Nov 05)
- RE: e-mail address mining tool? Eyal Udassin (Nov 06)
- Re: e-mail address mining tool? Tomasz Nidecki (Nov 07)
- Re: e-mail address mining tool? Justin (Nov 08)
- Message not available
- Re: e-mail address mining tool? Tomasz Nidecki (Nov 09)
- Re: e-mail address mining tool? Diarmaid McManus (Nov 10)
- Re: e-mail address mining tool? Tomasz Nidecki (Nov 07)
- RE: e-mail address mining tool? Eyal Udassin (Nov 06)
- Re: e-mail address mining tool? Hugo Vinicius Garcia Razera (Nov 08)
- Re: e-mail address mining tool? Tomasz Nidecki (Nov 09)
- Re: e-mail address mining tool? James Eaton-Lee (Nov 10)
- Re: e-mail address mining tool? Tomasz Nidecki (Nov 10)
- <Possible follow-ups>
- Re: e-mail address mining tool? Marco Ivaldi (Nov 13)