110 995 - POP3

Login

Basic

nc -nv <ip> 110
#wait for +OK response before executing another command
USER <user>
PASS <pass>

SSL

openssl s_client -connect <ip>:995 -crlf -quiet

Commands

USER <username>
PASS <password>
STAT
LIST
CAPA
RETR <idx>
DELE <idx>
TOP <idx> <num of lines>
RSET
QUIT

Retrieve an email

USER <username>
PASS <password>
LIST    #return a list of messages with an index
RETR <index>

Enumeration

nmap <ip> -p <port> -sV --script "pop3*"