What is SMTP?
SMTP (Simple Mail Transfer Protocol) is used to send email from clients to mail servers, and between mail servers.
Common security issues
Open relay misconfiguration (spammers love this).
Username enumeration (VRFY/EXPN).
Weak TLS enforcement.
Missing SPF/DKIM/DMARC leading to spoofing.
Brute-force authentication.
Default ports
25 – mail relay
465 – SMTPS (implicit TLS)
587 – client submission
Enumeration
Enumerate SMTP banners, auth methods, and NTLM info via nmap and openssl
Vulnerability Discovery
Guides on testing SMTP for open relays and user enumeration
SMTP Open Relay Testing
SMTP User Enumeration
Exploitation
Guides on relay abuse, spoofed email delivery, and auth brute force
SMTP Credential Attacks