Collaborate Disseminate
When I run a nmap scan against a remote target, it shows port 25 closed but an online nmap tool like (https://hackertarget.com/nmap-online-port-scanner/) shows that port 25 is open.
sudo nmap -sS -v 194.95.6.16 -p 25 –reas… Continue reading System nmap shows port closed but online nmap tool shows port open
When I run a nmap scan against a remote target, it shows port 25 closed but an online nmap tool like (https://hackertarget.com/nmap-online-port-scanner/) shows that port 25 is open.
sudo nmap -sS -v 194.95.6.16 -p 25 –reas… Continue reading System nmap shows port closed but online nmap tool shows port open
Lately our mail server (postfix 2.9.6, ubuntu 12.04, courier) got compromised by spammers that are send plenty of dummy mails to many recipients.
The spammers used two different ways:
using real domain on my server but fake user account t… Continue reading Whitelist mail domains and users to smtp on mail server
I mean, if I would have my own SMTP (also, is it just about money or are there some limitations to running my own SMTP server?) and would just completely made up the mail (headers, spoofed IPs and everything) and then sent th… Continue reading Can I spoof email?
I would like to know if it’s still possible to spoof an address from, for example, no-reply@company.com when sending to Gmail. I’ve tried sending a spoofed e-mail to other mail service and it performs the spoof successfully.
… Continue reading It’s still possible to email spoofing to Google
I am not a cryptographer. Maybe that is why I don’t see the issues with integrating PGP into SMTP.
In my head: Lea requests the server of Luke’s domain jedi.com to tell her the public key of luke@jedi.com (The request includ… Continue reading Why is end-to-end encryption still not default in mails?
I was sad to learn of the death of Ray Tomlinson on March 5. For those who don’t know, Ray was the engineer who figured out how to send email between computers in 1971. Part of that effort was the selection of the at sign (@) as the delimitation between personal account name and email domain for addressing messages.
Gmail has been hiding originating IP addresses for quite some time now. Hotmail and Yahoo have started doing this too. Apart from obvious privacy implications of revealing the sender’s IP address, is there another security a… Continue reading Rationale behind hiding originating IP address in emails?
Is there an easy way to test an SMTP server to check for configuration issues associated with STARTTLS encryption, and report on whether it has been configured properly so that email will be encrypted using STARTTLS?
Think of the Qualys S… Continue reading Test STARTTLS configuration of SMTP server
After reading about STARTTLS and SSL and performing a scan/pentest at our server I have the next question regarding security:
Is this STARTTLS warning below a security-vulnerability? And if so why?
As far I understand STARTT… Continue reading Is STARTTLS a security-vulnerability?