Skip to content

Latest commit

 

History

History
68 lines (51 loc) · 1.49 KB

110-995-pop.md

File metadata and controls

68 lines (51 loc) · 1.49 KB
description
Post Office Protocol (POP) is a networking and IP protocol that extracts and retrieves email from remote email servers for a client machine to access.

✉ 110, 995/POP

Banner Grabbing:

nc -nv <IP> 110

openssl s_client -connect <IP>:995 -crlf -quiet

Nmap Scan:

nmap --script "pop3-capabilities or pop3-ntlm-info" -sV -port <PORT> <IP> #All are default scripts

POP Commands:

POP commands:
  USER uid           Log in as "uid"
  PASS password      Substitue "password" for your actual password
  STAT               List number of messages, total mailbox size
  LIST               List messages and sizes
  RETR n             Show message n
  DELE n             Mark message n for deletion
  RSET               Undo any changes
  QUIT               Logout (expunges messages if no RSET)
  TOP msg n          Show first n lines of message number msg
  CAPA               Get capabilities

Why are these commands useful:

Example use case-

root@kali:~# telnet $ip 110
 +OK beta POP3 server (JAMES POP3 Server 2.3.2) ready 
 USER billydean    
 +OK
 PASS password
 +OK Welcome billydean

 list

 +OK 2 1807
 1 786
 2 1021

 retr 1

 +OK Message follows
 From: jamesbrown@motown.com
 Dear Billy Dean,

 Here is your login for remote desktop ... try not to forget it this time!
 username: billydean
 password: PA$$W0RD!Z
  • We can see that we are able to obtain clear-text credentials from this email via enumeration of POP.