SMTP Commands Enumeration

network/enumeration/smtp-commands-enum.yaml

@@ -0,0 +1,39 @@
+id: smtp-commands-enum
+
+info:
+  name: SMTP Commands Enumeration
+  author: pussycat0x
+  severity: info
+  description: |
+    Attempts to use EHLO and HELP to gather the Extended commands supported by an SMTP server.
+  reference:
+    - https://nmap.org/nsedoc/scripts/smtp-commands.html
+  metadata:
+    max-request: 2
+    verified: true
+    shodan-query: 'smtp'
+  tags: network,enum,smtp,mail
+
+tcp:
+  - inputs:
+      - data: "EHLO x\r\n"
+        read: 1024
+      - data: "HELP\r\n"
+        read: 1024
+
+    host:
+      - "{{Hostname}}"
+      - "{{Host}}:25"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "214"
+          - "This server supports"
+        condition: and
+
+    extractors:
+      - type: regex
+        regex:
+          - '214 (.*)'