Acerca de
This skill provides a structured framework for auditing the security of Simple Mail Transfer Protocol (SMTP) servers. It guides users through the entire penetration testing lifecycle, including service discovery, banner grabbing, and advanced user enumeration using VRFY, EXPN, and RCPT methods. The skill also covers critical vulnerability checks such as open relay testing, credential brute-forcing with Hydra, and analysis of email authentication records like SPF, DKIM, and DMARC. It is designed for security professionals and system administrators looking to harden mail infrastructure against unauthorized access and spoofing.
