sickn33 avatar

Smtp Penetration Testing

This covers the full SMTP penetration testing workflow, from banner grabbing and service discovery through user enumeration, open relay testing, and brute force authentication attempts. You get practical commands for tools like Nmap, Hydra, smtp-user-enum, and Metasploit, plus manual testing via netcat and telnet. The workflow is solid for authorized security assessments, walking through VRFY/EXPN/RCPT enumeration methods, relay testing variations, and checking email authentication records like SPF and DMARC. It's comprehensive but assumes you already have authorization and understand the legal boundaries. The reference tables for SMTP commands and response codes are genuinely useful for quick lookups during an engagement.

skills.sh installs
186
GitHub stars
39.4K
last updated
Jun 3, 2026

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill smtp-penetration-testing --agent claude-code

Installs into .claude/skills of the current project.

Files

⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited.

Mandatory confirmation gate Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:

  1. Ask the user to state the exact target URL, IP, account, or resource.
  2. Ask the user to confirm written authorization and the permitted scope.
  3. Show the exact command(s) and explain their expected effect.
  4. Wait for explicit confirmation in the current conversation.

Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.

AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.

SMTP Penetration Testing

Detailed Guide

Sponsors

Details

Repository
github.com/sickn33/antigravity-awesome-skills
Category
Testing & QA
First seen
Jun 3, 2026

More from sickn33/antigravity-awesome-skills

All 708
1cinience avataralicloud-network-alb-testcinience/alicloud-skillsSmoke test for Alibaba Cloud ALB skill. Validates SDK auth, script compilation, list instances, and health check flows.184skills.sh installs
2levnikolaevich avatarln-637-test-structure-auditorlevnikolaevich/claude-code-skillsAudits test maintainability and structure: layout drift, orphan tests, fragmented duplicates, test-to-source mapping, and domain grouping. Use when auditing tes184skills.sh installs
3nexu-io avatarhtml-ppt-testing-safety-alertnexu-io/open-design红琥珀警示 deck — 顶/底 45° 红黑 hazard 条纹、红色删除线否定标题、L1/L2/L3 绿/琥珀/红 tier 卡片、圆点状态 alert box、policy-yaml 代码块(红左边框 + bad 关键词高亮)、红绿 checklist、Q1 事故堆叠柱状图。适合安全 / 风险 / 事故复盘 / 182skills.sh installs
4akillness avatartesting-strategiesakillness/oh-my-skillstesting strategies173skills.sh installs
5proffesor-for-testing avatarn8n-security-testingproffesor-for-testing/agentic-qeCredential exposure detection, OAuth flow validation, API key management testing, and data sanitization verification for n8n workflows. Use when validating n8n 172skills.sh installs
6proffesor-for-testing avatarn8n-workflow-testing-fundamentalsproffesor-for-testing/agentic-qeComprehensive n8n workflow testing including execution lifecycle, node connection patterns, data flow validation, and error handling strategies. Use when testin172skills.sh installs