Nmap Development mailing list archives

Re: smtp-enum-users.nse bug?


From: Ron <ron () skullsecurity net>
Date: Sun, 27 Feb 2011 19:19:05 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 9 Feb 2011 00:14:27 +0200 Yehuda Eisenstark <yudieisenstark () gmail com> wrote:
The smtp-enum-users.nse seems to stop enumerating users when it hits
the first invalid user. In other words, say the first name in
usernames.lst is valid then that gets enumerated via the RCPT method
(in my case), but the second name in the list is invalid so the
script tries using VRFY and EXPN to enumerate as well, but then
stops. Now even though the 3rd username in the list is valid, the
script stops enumerating usernames once it hits the first username
thats invalid. Am I doing something wrong?

- Y
I don't have time to check the script right now, but you might be right - I haven't been getting results from it for 
awhile now. I've been meaning to jump into the code and diagnose why, but so far it's just been easier doing the 
enumeration by hand.. 

Ron
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAk1q+AkACgkQ2t2zxlt4g/ROSACeJCiZZDcvVs+p+PEM2PQABwOx
aMYAoNbnO/oAxR0nngpVrEM7MhVCkg78
=TDef
-----END PGP SIGNATURE-----
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: