Nmap Development mailing list archives
Re: smtp-enum-users.nse bug?
From: Ron <ron () skullsecurity net>
Date: Sun, 27 Feb 2011 19:19:05 -0600
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, 9 Feb 2011 00:14:27 +0200 Yehuda Eisenstark <yudieisenstark () gmail com> wrote:
The smtp-enum-users.nse seems to stop enumerating users when it hits the first invalid user. In other words, say the first name in usernames.lst is valid then that gets enumerated via the RCPT method (in my case), but the second name in the list is invalid so the script tries using VRFY and EXPN to enumerate as well, but then stops. Now even though the 3rd username in the list is valid, the script stops enumerating usernames once it hits the first username thats invalid. Am I doing something wrong? - Y
I don't have time to check the script right now, but you might be right - I haven't been getting results from it for awhile now. I've been meaning to jump into the code and diagnose why, but so far it's just been easier doing the enumeration by hand.. Ron -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAk1q+AkACgkQ2t2zxlt4g/ROSACeJCiZZDcvVs+p+PEM2PQABwOx aMYAoNbnO/oAxR0nngpVrEM7MhVCkg78 =TDef -----END PGP SIGNATURE----- _______________________________________________ Sent through the nmap-dev mailing list http://cgi.insecure.org/mailman/listinfo/nmap-dev Archived at http://seclists.org/nmap-dev/
Current thread:
- smtp-enum-users.nse bug? Yehuda Eisenstark (Feb 08)
- Re: smtp-enum-users.nse bug? Ron (Feb 27)