Collaborate Disseminate
Firstly, i’m not a mail expert! My workplace owns the domain example.com, until recently we had an application hosted on the LAN that worked fine and sent emails from info@example.com to various internal and external recipients using smtp … Continue reading Sending Mail from Different Server SPF Record
This article tells us that there are two types of STARTTLS: Opportunistic (i.e. optional STARTTLS) STARTTLS and Enforced STARTTLS, which works by the doctrine of "Encrypted connection or drop connection".
We can use checktls.com/… Continue reading How to check if a mail server is using Enforced-STARTTLS rather than Opportunistic-STARTTLS?
I have just started learning "penetration testing" and I have been tasked to do black-box penetration testing of an email server.
So the query I wrote on Google was "email server pentesting checklist", so that I could f… Continue reading Why do we only pentest SMTP when pentesting an email server?
i got this mail in my mailbox orange.fr , i took a look at the headers there is no headers from smtp , how could this be possible ?
normally mail should looks like this one
Continue reading Inboxed spam mail without SMTP trail and introduction?
I was playing around on my website and was trying to hack it. I read an article about telnet the article said to test telnet hostname/ipaddress port.
I used this and I got this back:
Trying 103.211.216.63…
Connected to 103.211.216.63.
Es… Continue reading How to exploit TELNET?
I have noticed this issue while using Google’s Gmail with Thunderbird. When I send an email from Gmail’s web front end at https://mail.google.com/ my internal and external IP address are not included in the email header.
However, I would l… Continue reading How to send emails with Thunderbird without revealing my internal and external IP address?
Is there are mail-header I could use to mark a mail as spam, a header the most mail clients would understand, especially Outlook?
When the client receive the mail (pop3) it will see the header and place the mail into the junk folder.
(This… Continue reading "Universal" mail header to mark mail as spam?
Recently I’ve been studying SMTP and I’ve wrote a program that uses socket programming to send emails via extended SMTP (RFC2554).
As I understand, in this protocol one sends base64 encoded strings of username and password to the mail serv… Continue reading SMTP security regarding sending username and password
I have been tasked with testing our spam filtering solution, for that I need to try sending e-mails spoofing addresses, malicious attachments, and such. Do you know of an e-mail service that will allow me to send malicious attachments or s… Continue reading Mail server for testing my spam filter
Instead of depending on secure application protocols such as HTTPS, SSH, SFTP,
Secure SMTP, DNS-Sec, etc., many corporate IT environments use TLS for
communication between the modules or systems of their enterprise applications,
specifical… Continue reading Why many IT corporate companies love TLS?