📦
content-creator
88إنشاء محتوى تسويقي متسق مع العلامة التجارية
تحتاج فرق التسويق إلى محتوى يبقى متسقًا عبر القنوات. تساعد هذه المهارة في تخطيط المحتوى وكتابته وتحليله وتحسينه بما يتوافق مع نبرة العلامة التجارية وSEO.
الكتابة والمحتوى عرض
المهارات smtp-penetration-testing
📦
smtp-penetration-testing
v1.1 مراجعة المحتوى r1 حرج ⚙️ الأوامر الخارجية🌐 الوصول إلى الشبكة
تقييم أمان خادم SMTP
يمكن لخوادم البريد أن تكشف المستخدمين، وخوادم الترحيل، وبيانات الاعتماد الضعيفة، وضوابط المصادقة المفقودة. تنظم هذه المهارة اختبار SMTP المصرح به وتخطيط المعالجة.
يدعم: Claude Codex Code(CC)
لا تثبّت هذا Skill تلقائيًا.
تتطلب السياسة المعتمدة مراجعة المشغّل قبل أي إجراء تثبيت.
التثبيت باستخدام Agent لدي
انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.
طلب الوكيل
Review the Skillstore skill "smtp-penetration-testing" from https://skillstore.io/skills/sickn33-smtp-penetration-testing.md and its manifest at https://skillstore.io/api/skills/sickn33-smtp-penetration-testing/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.
موارد مهيّأة لـ Agents
استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.
اختبرها
جارٍ استخدام "smtp-penetration-testing". تُظهر الملاحظات المصرح بها أن VRFY مفعّل، وEXPN معطّل، وSTARTTLS متاح على منفذ الإرسال.
النتيجة المتوقعة:
- النتيجة: تعداد المستخدمين ممكن عبر استجابات VRFY.
- الأثر: يمكن للمهاجمين التحقق من صناديق البريد قبل هجمات التصيد أو كلمات المرور.
- الإصلاح: عطّل VRFY أو أرجع استجابات موحدة للمستخدمين غير المعروفين.
جارٍ استخدام "smtp-penetration-testing". قبل اختبار الترحيل مستلمًا خارجيًا من اتصال غير مصادق عليه.
النتيجة المتوقعة:
- النتيجة: يبدو أن الخادم يسمح بترحيل غير مصرح به.
- الأثر: قد تُساء إساءة استخدام الخدمة لإرسال الرسائل المزعجة أو انتحال الهوية.
- الإصلاح: اطلب المصادقة أو قيّد الترحيل بالشبكات الموثوقة فقط.
جارٍ استخدام "smtp-penetration-testing". تجد مراجعة DNS فشلًا لينًا في SPF، ولا توجد سياسة DMARC، ودليل DKIM مفقود.
النتيجة المتوقعة:
- النتيجة: مصادقة البريد الإلكتروني غير مكتملة.
- الأثر: قد يكون من الأصعب على المستلمين رفض الرسائل المزيفة.
- الإصلاح: انشر سجلات SPF وDKIM وDMARC متوافقة مع المراقبة.
التدقيق الأمني
حرجv6 • ٩/٧/٢٠٢٦ فتح التقرير المرتبط بالإصدار
I confirmed critical and high-risk findings for Metasploit usage, Nmap scanning, SMTP user enumeration, relay testing, credential brute force, and spoofing workflows. Some Markdown backtick and private IP detections are false positives, but the skill still contains direct operational attack guidance. Legal and ethical cautions are present, but they do not neutralize the misuse risk.
1
الملفات التي تم فحصها
501
الأسطر التي تم تحليلها
76
عناصر المراجعة
0
تم تجاهل الإيجابيات الكاذبة
مخاوف أمنية مؤكدة (39)
حرج
Metasploit framework
# Metasploit Framework
The skill explicitly references Metasploit modules for SMTP enumeration, relay testing, or login attacks. This is exploit-framework guidance, not an incidental mention.
حرج
Metasploit framework
Using Metasploit:
The skill explicitly references Metasploit modules for SMTP enumeration, relay testing, or login attacks. This is exploit-framework guidance, not an incidental mention.
حرج
Metasploit framework
set USER_FILE /usr/share/wordlists/metasploit/unix_users.txt
The skill explicitly references Metasploit modules for SMTP enumeration, relay testing, or login attacks. This is exploit-framework guidance, not an incidental mention.
حرج
Metasploit framework
Using Metasploit:
The skill explicitly references Metasploit modules for SMTP enumeration, relay testing, or login attacks. This is exploit-framework guidance, not an incidental mention.
حرج
Metasploit framework
Using Metasploit:
The skill explicitly references Metasploit modules for SMTP enumeration, relay testing, or login attacks. This is exploit-framework guidance, not an incidental mention.
حرج
Metasploit framework
| Metasploit | `use auxiliary/scanner/smtp/smtp_enum` |
The skill explicitly references Metasploit modules for SMTP enumeration, relay testing, or login attacks. This is exploit-framework guidance, not an incidental mention.
حرج
Metasploit framework
# Method 3: Metasploit
The skill explicitly references Metasploit modules for SMTP enumeration, relay testing, or login attacks. This is exploit-framework guidance, not an incidental mention.
حرج
Metasploit framework
set USER_FILE /usr/share/metasploit-framework/data/wordlists/unix_users.txt
The skill explicitly references Metasploit modules for SMTP enumeration, relay testing, or login attacks. This is exploit-framework guidance, not an incidental mention.
عرض جميع النتائج المؤكدة البالغة 39
حرج
Phishing Preparation Guidance
The skill labels user enumeration as preparation for phishing and shows how discovered accounts can be listed as valid users.
The scenario explicitly says user enumeration is for phishing preparation, and the example shows valid accounts being found.
حرج
Credential Brute Force Workflow
The skill provides a complete SMTP authentication attack workflow using Hydra, Medusa, and Metasploit with user and password lists.
The section is titled brute force authentication and lists operational tooling, target parameters, and password file inputs.
مرتفع
System reconnaissance
2. **User Enumeration Results** - Valid email addresses discovered
The cited line supports discovering valid SMTP users, including an example framed as phishing preparation. This reconnaissance can enable targeted credential attacks and social engineering.
مرتفع
System reconnaissance
Enumerate valid email addresses:
The cited line supports discovering valid SMTP users, including an example framed as phishing preparation. This reconnaissance can enable targeted credential attacks and social engineering.
مرتفع
System reconnaissance
**Scenario:** Enumerate valid users for phishing preparation
The cited line supports discovering valid SMTP users, including an example framed as phishing preparation. This reconnaissance can enable targeted credential attacks and social engineering.
مرتفع
System reconnaissance
# Results show valid users
The cited line supports discovering valid SMTP users, including an example framed as phishing preparation. This reconnaissance can enable targeted credential attacks and social engineering.
مرتفع
Network scanning tools
# Nmap with SMTP scripts
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
sudo apt-get install nmap
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
nmap -p 25,465,587,2525 -sV TARGET_IP
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
nmap -sV -sC -p 25 TARGET_IP
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
nmap --script=smtp-* -p 25 TARGET_IP
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
# Using Nmap
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
nmap -sV -p 25 TARGET_IP
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
Using Nmap:
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
nmap --script smtp-enum-users -p 25 TARGET_IP
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
nmap --script smtp-enum-users --script-args smtp-enum-users.methods={VRFY,EXPN,RCPT} -p 25 TARGET_IP
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
# Using Nmap
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
nmap -p 25 --script smtp-open-relay TARGET_IP
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
nmap --script ssl-enum-ciphers -p 25 TARGET_IP
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
| Nmap | `nmap --script smtp-enum-users -p 25 IP` |
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
nmap -sV -sC -p 25,465,587 mail.target.com
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
nmap -p 25 --script smtp-open-relay mail.target.com
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
# Document with Nmap
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
nmap -p 25 --script smtp-open-relay --script-args smtp-open-relay.from=test@attacker.com,smtp-open-r
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Network scanning tools
| Connection Refused | Port blocked or closed | Check port with nmap; ISP may block port 25; try 587
The skill provides Nmap-based SMTP service discovery, enumeration, cipher checks, or open-relay testing. These are active network-scanning instructions against target mail servers.
مرتفع
Email Spoofing Social Engineering Example
The skill includes a spoofed CEO message with an urgent request, which can support impersonation and social engineering.
The example uses a CEO identity and urgent instruction text, showing a realistic impersonation pattern rather than a purely defensive check.
مرتفع
Hidden Recipient Header Injection Guidance
The skill demonstrates adding a hidden Bcc recipient and malicious header during SMTP DATA submission.
The section is explicitly about command injection and includes hidden-recipient and injected-header content.
مرتفع
Open Relay Abuse Workflow
The skill gives manual and tool-based steps for testing external relay acceptance and documents exploitation potential.
The relay sections show external recipient tests and describe accepted relay traffic as vulnerable, with practical steps to reproduce it.
منخفض
System reconnaissance
- Target SMTP server IP/hostname
The cited line contributes to target or environment reconnaissance for SMTP assessment. It is low severity by itself but part of the broader operational workflow.
منخفض
System reconnaissance
- Some servers respond identically for valid/invalid users
The cited line contributes to target or environment reconnaissance for SMTP assessment. It is low severity by itself but part of the broader operational workflow.
منخفض
Network reconnaissance
### Required Access
The required access section asks for a target SMTP IP or hostname, which is necessary for active network reconnaissance. The line is contextual but real within the testing workflow.
عناصر مراجعة القدرات (76)
هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.
حرج
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
حرج
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
حرج
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
حرج
Ruby/shell backtick execution
| Metasploit | `use auxiliary/scanner/smtp/smtp_enum` |
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
حرج
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
| smtp-user-enum | `smtp-user-enum -M VRFY -U users.txt -t IP` |
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
| Nmap | `nmap --script smtp-enum-users -p 25 IP` |
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
Ruby/shell backtick execution
```
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
مرتفع
sudo privilege escalation
sudo apt-get install nmap
The skill instructs users to run sudo apt-get install for Nmap network scanner. Requiring elevated package installation for offensive SMTP tooling creates a real host and misuse risk.
مرتفع
sudo privilege escalation
sudo apt-get install netcat
The skill instructs users to run sudo apt-get install for Netcat network utility. Requiring elevated package installation for offensive SMTP tooling creates a real host and misuse risk.
مرتفع
sudo privilege escalation
sudo apt-get install hydra
The skill instructs users to run sudo apt-get install for Hydra credential attack tool. Requiring elevated package installation for offensive SMTP tooling creates a real host and misuse risk.
مرتفع
sudo privilege escalation
sudo apt-get install smtp-user-enum
The skill instructs users to run sudo apt-get install for SMTP user enumeration tool. Requiring elevated package installation for offensive SMTP tooling creates a real host and misuse risk.
مرتفع
Email sending capability
# Using smtp-user-enum with VRFY
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
smtp-user-enum -M VRFY -U /usr/share/wordlists/users.txt -t TARGET_IP
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
smtp-user-enum -M EXPN -U /usr/share/wordlists/users.txt -t TARGET_IP
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
smtp-user-enum -M RCPT -U /usr/share/wordlists/users.txt -t TARGET_IP
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
smtp-user-enum -M VRFY -U users.txt -t TARGET_IP -p 25 -d target.com
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
use auxiliary/scanner/smtp/smtp_enum
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
# SMTP user enumeration script
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
nmap --script smtp-enum-users -p 25 TARGET_IP
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
nmap --script smtp-enum-users --script-args smtp-enum-users.methods={VRFY,EXPN,RCPT} -p 25 TARGET_IP
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
nmap -p 25 --script smtp-open-relay TARGET_IP
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
use auxiliary/scanner/smtp/smtp_relay
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
Test for weak SMTP credentials:
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
hydra -l admin -P /usr/share/wordlists/rockyou.txt smtp://TARGET_IP
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
hydra -l admin -P passwords.txt -s 465 -S TARGET_IP smtp
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
hydra -L users.txt -P passwords.txt TARGET_IP smtp
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
hydra -l admin -P passwords.txt smtp://TARGET_IP -V
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
medusa -h TARGET_IP -u admin -P /path/to/passwords.txt -M smtp
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
use auxiliary/scanner/smtp/smtp_login
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
### Phase 8: SMTP Command Injection
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
| smtp-user-enum | `smtp-user-enum -M VRFY -U users.txt -t IP` |
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
| Nmap | `nmap --script smtp-enum-users -p 25 IP` |
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
| Metasploit | `use auxiliary/scanner/smtp/smtp_enum` |
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
smtp-user-enum -M VRFY -U /usr/share/seclists/Usernames/top-usernames-shortlist.txt -t mail.target.c
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
nmap -p 25 --script smtp-open-relay mail.target.com
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
hydra -l admin -P /usr/share/wordlists/fasttrack.txt smtp://mail.target.com
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
smtp-user-enum -M VRFY -U users.txt -t 192.168.1.100 -p 25
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
smtp-user-enum -M RCPT -U users.txt -t 192.168.1.100 -p 25 -d target.com
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
use auxiliary/scanner/smtp/smtp_enum
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
مرتفع
Email sending capability
nmap -p 25 --script smtp-open-relay --script-args smtp-open-relay.from=test@attacker.com,smtp-open-r
The cited line supports active SMTP enumeration, relay testing, authentication attacks, or offensive tooling. This can enable unauthorized mailbox discovery, spam relay abuse, or credential compromise.
متوسط
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
متوسط
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
متوسط
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
متوسط
Ruby/shell backtick execution
```bash
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
متوسط
Ruby/shell backtick execution
| Netcat | `nc IP 25` then manual commands |
The Markdown block provides executable command guidance for SMTP scanning, enumeration, relay testing, or credential attacks. Even though the syntax trigger is a code fence, the operational external-command risk is real.
متوسط
Email sending capability
description: This skill should be used when the user asks to "perform SMTP penetration testing", "en
The cited line introduces SMTP assessment tooling or capabilities that lead into active mail-server testing. The context makes the email security risk real.
متوسط
Email sending capability
Conduct comprehensive security assessments of SMTP (Simple Mail Transfer Protocol) servers to identi
The cited line introduces SMTP assessment tooling or capabilities that lead into active mail-server testing. The context makes the email security risk real.
متوسط
Email sending capability
# Nmap with SMTP scripts
The cited line introduces SMTP assessment tooling or capabilities that lead into active mail-server testing. The context makes the email security risk real.
متوسط
Email sending capability
# SMTP user enumeration tool
The cited line introduces SMTP assessment tooling or capabilities that lead into active mail-server testing. The context makes the email security risk real.
متوسط
Email sending capability
sudo apt-get install smtp-user-enum
The cited line introduces SMTP assessment tooling or capabilities that lead into active mail-server testing. The context makes the email security risk real.
متوسط
Email sending capability
- Target SMTP server IP/hostname
The cited line supports active SMTP assessment context such as target selection, service discovery, or protocol testing. It is less direct but still part of an operational testing workflow.
متوسط
Email sending capability
### Phase 2: SMTP Service Discovery
The cited line supports active SMTP assessment context such as target selection, service discovery, or protocol testing. It is less direct but still part of an operational testing workflow.
متوسط
Email sending capability
Identify SMTP servers and versions:
The cited line supports active SMTP assessment context such as target selection, service discovery, or protocol testing. It is less direct but still part of an operational testing workflow.
متوسط
Email sending capability
# Discover SMTP ports
The cited line introduces SMTP assessment tooling or capabilities that lead into active mail-server testing. The context makes the email security risk real.
متوسط
Email sending capability
# SMTP-specific scripts
The cited line introduces SMTP assessment tooling or capabilities that lead into active mail-server testing. The context makes the email security risk real.
متوسط
Email sending capability
nmap --script=smtp-* -p 25 TARGET_IP
The cited line introduces SMTP assessment tooling or capabilities that lead into active mail-server testing. The context makes the email security risk real.
متوسط
Email sending capability
Retrieve SMTP server information:
The cited line supports active SMTP assessment context such as target selection, service discovery, or protocol testing. It is less direct but still part of an operational testing workflow.
متوسط
Email sending capability
# Manual SMTP commands
The cited line supports active SMTP assessment context such as target selection, service discovery, or protocol testing. It is less direct but still part of an operational testing workflow.
متوسط
Email sending capability
### Phase 4: SMTP Command Enumeration
The cited line supports active SMTP assessment context such as target selection, service discovery, or protocol testing. It is less direct but still part of an operational testing workflow.
متوسط
Email sending capability
Test available SMTP commands:
The cited line supports active SMTP assessment context such as target selection, service discovery, or protocol testing. It is less direct but still part of an operational testing workflow.
متوسط
Email sending capability
openssl s_client -connect TARGET_IP:25 -starttls smtp
The cited line supports active SMTP assessment context such as target selection, service discovery, or protocol testing. It is less direct but still part of an operational testing workflow.
متوسط
Email sending capability
### Example 1: Complete SMTP Assessment
The cited line supports active SMTP assessment context such as target selection, service discovery, or protocol testing. It is less direct but still part of an operational testing workflow.
متوسط
Email sending capability
openssl s_client -connect mail.target.com:25 -starttls smtp
The cited line supports active SMTP assessment context such as target selection, service discovery, or protocol testing. It is less direct but still part of an operational testing workflow.
عوامل الخطر
⚙️ الأوامر الخارجية (50)
SKILL.md:18-33 SKILL.md:33-57 SKILL.md:57-63 SKILL.md:63-69 SKILL.md:69-83 SKILL.md:83-89 SKILL.md:89-105 SKILL.md:105-109 SKILL.md:109-115 SKILL.md:115-121 SKILL.md:121-138 SKILL.md:138-142 SKILL.md:142-157 SKILL.md:157-163 SKILL.md:163-175 SKILL.md:175-179 SKILL.md:179-185 SKILL.md:185-189 SKILL.md:189-195 SKILL.md:195-201 SKILL.md:201-217 SKILL.md:217-221 SKILL.md:221-225 SKILL.md:225-229 SKILL.md:229-238 SKILL.md:238-244 SKILL.md:244-256 SKILL.md:256-260 SKILL.md:260-262 SKILL.md:262-266 SKILL.md:266-273 SKILL.md:273-279 SKILL.md:279-290 SKILL.md:290-294 SKILL.md:294-303 SKILL.md:303-309 SKILL.md:309-318 SKILL.md:318-324 SKILL.md:324-331 SKILL.md:331-339 SKILL.md:339-340 SKILL.md:340-341 SKILL.md:341-342 SKILL.md:342-343 SKILL.md:343-344 SKILL.md:344-345 SKILL.md:345-346 SKILL.md:346-365 SKILL.md:365-366 SKILL.md:366-367
🌐 الوصول إلى الشبكة (50)
SKILL.md:439 SKILL.md:442 SKILL.md:447 SKILL.md:452 SKILL.md:453 SKILL.md:454 SKILL.md:2 SKILL.md:3 SKILL.md:9 SKILL.md:13 SKILL.md:19 SKILL.md:28 SKILL.md:29 SKILL.md:36 SKILL.md:42 SKILL.md:48 SKILL.md:55 SKILL.md:60 SKILL.md:65 SKILL.md:67 SKILL.md:70 SKILL.md:76 SKILL.md:77 SKILL.md:87 SKILL.md:92 SKILL.md:96 SKILL.md:102 SKILL.md:111 SKILL.md:114 SKILL.md:117 SKILL.md:119 SKILL.md:164 SKILL.md:165 SKILL.md:168 SKILL.md:171 SKILL.md:174 SKILL.md:180 SKILL.md:190 SKILL.md:191 SKILL.md:194 SKILL.md:203 SKILL.md:222 SKILL.md:242 SKILL.md:246 SKILL.md:249 SKILL.md:252 SKILL.md:255 SKILL.md:261 SKILL.md:267 SKILL.md:275
الأنماط المكتشفة
Metasploit framework×8System reconnaissance×6Network reconnaissanceNetwork scanning tools×19
دقّقه: codex عرض سجل التدقيق →
شارك واستشهد بهذا التقرير
شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.
نسخ رابط التقرير
https://skillstore.io/skills/sickn33-smtp-penetration-testing/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportشارة Markdown
[](https://skillstore.io/skills/sickn33-smtp-penetration-testing?utm_source=security_passport_badge)شارة HTML
<a href="https://skillstore.io/skills/sickn33-smtp-penetration-testing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-smtp-penetration-testing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>بطاقة قابلة للتضمين
<iframe src="https://skillstore.io/embed/skills/sickn33-smtp-penetration-testing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>الاستشهادات الأكاديمية (APA · BibTeX · CFF)
اقتباس APA
sickn33. (2026). smtp-penetration-testing security audit report (audit version 6) [Author version 1.1]. Skillstore. https://skillstore.io/skills/sickn33-smtp-penetration-testing/audits/6اقتباس BibTeX
@techreport{sickn33-sickn33-smtp-penetration-testing-2026,
author = {sickn33},
title = {smtp-penetration-testing security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/sickn33-smtp-penetration-testing/audits/6},
note = {Author version 1.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "smtp-penetration-testing security audit report (audit version 6)"
version: "1.1"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/sickn33-smtp-penetration-testing/audits/6"
identifiers:
- type: other
value: "skillstore:sickn33-smtp-penetration-testing:audit:6"
description: "Skillstore immutable audit report identifier"
تقييم Skillstore
سبب هذا التقييم موثوقية الأدلة: متوسط 55
الهندسة المعمارية
85
قابلية الصيانة
87
المحتوى
69
المجتمع
87
الامتثال للمواصفات
ما الذي يمكنك بناؤه
تدقيق تعرض خادم البريد
مراجعة منافذ SMTP، واللافتات، وسلوك الترحيل، وضوابط المصادقة أثناء تقييم مصرح به.
تقوية بنية البريد الإلكتروني المؤسسية
تحويل نتائج اختبار SMTP إلى خطوات معالجة واضحة لخوادم الترحيل، والتعداد، وTLS، وسجلات المصادقة.
إعداد تمرين أمان مختبري
إنشاء خطة اختبار SMTP مضبوطة للتدريب دون استخدام مستخدمين حقيقيين أو خوادم بريد إنتاجية.
جرّب هذه الموجّهات
مراجعة نطاق SMTP الأساسي
راجع نطاق تقييم SMTP المصرح به الخاص بي لـ [domain]. حدد خطوات الاستكشاف الآمنة والأدلة التي ينبغي أن أجمعها.
تفسير نتائج اللافتات
بالنظر إلى لافتات SMTP ورموز الاستجابة هذه، لخّص المخاطر المحتملة، والإيجابيات الكاذبة، وأسئلة المتابعة للمسؤول.
تخطيط فحوصات الترحيل والتعداد
أنشئ خطة اختبار محدودة لتعرض الترحيل وتعداد المستخدمين على خوادم البريد المعتمدة. ضمّن شروط الإيقاف والتعامل مع الأدلة.
كتابة تقرير المعالجة
حوّل نتائج SMTP المصرح بها هذه إلى ملخص تنفيذي، وتأثير تقني، وإصلاحات مرتبة حسب الأولوية، وخطوات تحقق.
أفضل الممارسات
- اختبر فقط الأنظمة التي تملكها أو لديك إذن مكتوب لتقييمها.
- استخدم أهدافًا مختبرية لتمارين القوة الغاشمة، والانتحال، والترحيل.
- سجّل الأدلة، وشروط الإيقاف، ومالكي المعالجة قبل الاختبار.
تجنب
- لا تستخدم نتائج التعداد لإعداد حملات تصيد أو رسائل مزعجة.
- لا تنفذ هجمات القوة الغاشمة على حسابات إنتاجية دون موافقة صريحة وضمانات.
- لا ترسل حركة ترحيل حية إلى مستلمين من جهات خارجية.
الأسئلة المتكررة
هل تتطلب هذه المهارة تفويضًا؟
نعم. يمكن أن يؤثر اختبار SMTP في الخدمات والمستخدمين الحقيقيين، لذلك يلزم الحصول على تفويض كتابي.
هل يمكنها اختبار التعرض للترحيل المفتوح؟
نعم. تصف فحوصات الترحيل، لكن ينبغي أن تستخدم هذه الفحوصات مستلمين مضبوطين وأنظمة معتمدة.
هل تتضمن إرشادات للقوة الغاشمة؟
نعم. تشير إلى أدوات اختبار المصادقة، والتي تنشئ مخاطر عالية خارج التقييمات المضبوطة.
هل يمكنها المساعدة في التقوية الدفاعية؟
نعم. تغطي تعطيل التعداد، وفرض TLS، وإضافة حدود للمعدل، وتحسين SPF وDKIM وDMARC.
هل تشغّل الأدوات تلقائيًا؟
لا. المهارة نص إرشادي، لكنها توفر أوامر يمكن للمستخدم تشغيلها بشكل منفصل.
هل هي مناسبة للنشر في سوق عام؟
تحتاج إلى مراجعة قوية لأنها تتضمن سير عمل هجومية، واستخدام أطر استغلال، وأمثلة على هجمات بيانات الاعتماد.
تفاصيل المطور
المؤلف
sickn33الترخيص
MIT
إصدار المؤلف
v1.1
مراجعة Skillstore
r1
تنبيه الإصدار
الإصدار الذي أعلنه المؤلف ليس SemVer صالحًا.
المستودع
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/smtp-penetration-testingمرجع
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
حداثة الصيانة
٢٠/٧/٢٠٢٦
الاستخدام
9 تنزيلات · 130 مشاهدات
بنية الملفات
📄 SKILL.md
المزيد من sickn33
عرض الكل📦
prompt-engineering-patterns
85حسّن مطالبات LLM باستخدام أنماط مثبتة
تستهلك المطالبات غير المتسقة الوقت وتجعل مخرجات الذكاء الاصطناعي صعبة الثقة. ترشد هذه المهارة تصميم المطالبات باستخدام أنماط قابلة لإعادة الاستخدام، وأمثلة، وخطوات تقييم، وسير عمل للتحسين.
الإنتاجية عرض
📦
senior-architect
81تصميم معماريات برمجية قابلة للتوسع
يصعب مقارنة قرارات المعمارية عبر أنظمة الويب والهواتف المحمولة والخلفية والسحابة. توفر هذه المهارة أدلة منظمة وسكربتات تمهيدية محلية للتقارير ومراجعة الاعتماديات وتوثيق المفاضلات.
البرمجة والتطوير عرض
📦
senior-fullstack
81بناء تطبيقات Fullstack بأنماط هندسية متقدمة
تحتاج الفرق إلى إرشادات متسقة للإعداد والبنية والمراجعة لتطبيقات الويب الحديثة. توفر هذه المهارة أدوات إنشاء هياكل أولية، ومراجع لسير العمل، ومطالبات للجودة لمشاريع React وNext.js وNode.js وGraphQL وPostgreSQL.
البرمجة والتطوير عرض
📦
prompt-engineer
81حسّن موجهات الذكاء الاصطناعي باستخدام Prompt Engineer
كتابة موجهات واضحة صعبة عندما تكون الأهداف غامضة أو معقدة. تحوّل هذه المهارة الطلبات الأولية إلى موجهات منظمة باستخدام أطر عمل مثبتة للموجهات.
الإنتاجية عرض
📦
product-manager-toolkit
80رتّب أولويات عمل المنتج باستخدام رؤى البحث
تحتاج فرق المنتج إلى طرق أسرع لترتيب الميزات، وتلخيص المقابلات، وتوثيق القرارات. توفر هذه المهارة تسجيل RICE، وتحليل المقابلات، وقوالب PRD للتخطيط المنظم.
الإنتاجية عرض
مهارات ذات صلة
عرض الكل📦
senior-security
81تعزيز مراجعات أمان التطبيقات
بواسطة alirezarezvani
غالبًا ما تفتقر مراجعات الأمان إلى قوائم تحقق متسقة وسير عمل قابل لإعادة الاستخدام. توفر هذه المهارة قوالب تمهيدية لمراجعات الأمان، وإرشادات مرجعية، وسكربتات تقارير بسيطة لـ Claude وCodex وClaude Code.
الأمان والامتثال عرض
📦
security-report
78إنشاء تقارير تقييم أمني
بواسطة BytR-Ecosystems
يصعب عرض النتائج الأمنية بوضوح على المديرين التنفيذيين والفرق التقنية. تنشئ هذه المهارة تقارير DOCX منظمة تتضمن تصنيفات للمخاطر وإرشادات للمعالجة.
الأمان والامتثال عرض
📦
security-audit
76Audit Codebases for Security Vulnerabilities
بواسطة cloudflare
Security reviews often miss trust-boundary failures or produce weak evidence. This skill structures reconnaissance, isolated validation, independent verification, and actionable reporting.
الأمان والامتثال عرض
📦
telnetshell
38تدقيق واجهات Telnet shell لأجهزة IoT
بواسطة BrownFineSecurity
يصعب فحص واجهات telnet shell لأجهزة IoT بشكل متسق أثناء اختبارات الأمان المصرّح بها. توفّر هذه المهارة أداة مساعدة لـ telnet، ونصوص تعداد، وإرشادات تسجيل، وسير عمل منظّمة لتقييم الأجهزة.
الأمان والامتثال عرض
📦
exploitation-knowledge
38تقييم تقنيات الاستغلال والوصول إلى الصدفة
بواسطة CharlesKozel
تحتاج فرق الأمن إلى طريقة منظمة لمراجعة سير عمل الاستغلال وفهم المخاطر التشغيلية. تنظم هذه المهارة أساليب الاستغلال، وخيارات الحمولات، وفحوصات ما بعد الوصول للمختبرات المضبوطة أو مراجعات التدقيق.
الأمان والامتثال عرض
📦
pentest-coordinator
38تنسيق اختبارات اختراق مختبرية مصرح بها
بواسطة CharlesKozel
تتطلب مختبرات اختبار الاختراق تتبعًا دقيقًا للحالة عبر مراحل الاستطلاع والاستغلال وتصعيد الامتيازات. تنسق هذه المهارة سير عمل مختبريًا مصرحًا به باستخدام ملاحظات ومحاولات ومعايير إكمال منظمة.
الأمان والامتثال عرض