IMAP:
Enumeration
Enumerate IMAP capabilities, auth methods, and NTLM info
1 guide
•
Created Dec 28, 2025
•
Updated Mar 29, 2026
IMAP enumeration extracts server details and validates user accounts. Banner grabbing reveals the mail server software and version, while the CAPABILITY command lists supported authentication methods and extensions.
User validation through LOGIN or AUTHENTICATE responses, EXPN, and VRFY (when available) confirms which accounts exist. Mailbox enumeration via LIST and LSUB shows folder structures once you have access.
The subpages cover banner analysis, capability inspection, and techniques for confirming valid user accounts.