배너 그래빙 (Banner Grabbing)
텔넷(Telnet)
telnet 10.0.0.3 143
넷캣(Netcat)
nc -n 10.0.0.3 143
Openssl (IMAPS 접속 시)
openssl s_client -connect 10.0.0.3:993
NTLM 정보 노출 취약점 (NTLM Information Disclosure)
수동 테스트:
telnet example.com 143
...
>> a1 AUTHENTICATE NTLM
+
>> TlRMTVNTUAABAAAAB4IIAAAAAAAAAAAAAAAAAAAAAAA=
+ TlRMTVNTUAACAAAACgAKADgAAAAFgooCBqqVKFrKPCMAAAAAAAAAAEgASABCAAAABgOAJQAAAA9JAEkAUwAwADEAAgAKAEkASQBTADAAMQABAAoASQBJAFMAMAAxAAQACgBJAEkAUwAwADEAAwAKAEkASQBTADAAMQAHAAgAHwMI0VPy1QEAAAAA
imap-ntlm-info NSE 스크립트:
nmap -p 143,993 --script imap-ntlm-info 10.0.0.3