ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ67

VerifiedNetwork Penetration Testing Methodology – External

William, a penetration tester at a pen test firm, has been asked to obtain information about the SMTP server on a target network.

What must William do to obtain the SMTP server information?

Explanation

A bounce/non-delivery report can include SMTP diagnostic information such as the generating server, the remote server that rejected delivery, the SMTP response, and original message headers. Sending mail to a nonexistent recipient can trigger such a report and disclose the mail-server identity.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!