May 2017
Intermediate to advanced
416 pages
21h 33m
English
To retrieve information from an SMTP server with NTLM, run the following command:
$ nmap -p25,465,587 --script smtp-ntlm-info --script-args smtp-ntlm-info.domain=<target domain> <target>
The results will include NetBIOS, DNS, and OS build version information in the script output section:
25/tcp open smtp | smtp-ntlm-info: | Target_Name: SMTP | NetBIOS_Domain_Name: SMTP | NetBIOS_Computer_Name: SMTP | DNS_Domain_Name: 0xdeadbeefcafe.com | DNS_Computer_Name: smtp.0xdeadbeefcafe.com | DNS_Tree_Name: 0xdeadbeefcafe.com |_ Product_Version: 6.1.420
Read now
Unlock full access