Hands-On Penetration Testing with Kali NetHunter

Exercise – using NMAP to enumerate

Once you have an IP address of an MX record, we can start extracting information (or attempting to). One way we can do this is by using the nmap tool along with its built-in scripting ability. We can do this by entering the following at the console:

nmap -script smtp-enum-users.nse 65.54.254.145 

If you look at the command closely, you can see  the addition of the -script switch, which instructs the nmap tool to run an NSE script. The NSE component of nmap stands for Nmap Scripting Engine, which allows for the creation of custom scripts, the use of preinstalled ones, or the acquisition of ones from a third party. In this case, the script chosen is preinstalled and extracts names from SMTP servers.

A word ...