đź“‘
Security Notes
  • Readme
  • Resources
    • Useful sites
    • Metasploit
      • Searchsploit
      • Msfvenom
      • Meterpreter
    • Shells
    • Linux
      • Cron
      • Connection
      • Compilers
    • Windows
      • Kernel exploits table
    • Bruteforce
      • Checklist
      • John the Ripper
      • Hashcat
    • BOF
      • Assembly
    • Gaining access checklist
  • Cloud - AWS
    • Enumeration
    • References
    • Bucket S3
      • Public Bucket
      • AMI Files
      • File upload to RCE
    • EC2
      • cloud-init Exploits
      • SSRF To AWS Role compromise
      • Unencrypted EBS
    • IAM
      • Account Disclosure by resource policy
    • Lambda Function
      • Code Injection
      • Attacking APIs
    • VPC
      • Expose Resources
  • Networking
    • Nmap
      • Scan types
    • TCPDump
    • Port forwarding
    • Ports
      • 21 - FTP
      • 22 - SSH
      • 25 465 587 - SMTP
      • 53 - DNS
      • 110 995 - POP3
      • 111 - NFS
      • 113 - Ident
      • 123 - NTP
      • 135 137 139 - RPC
      • 143 993 - IMAP
      • 161 - SNMP
      • 389 - LDAP
      • 139 445 - SMB
      • 873 - Rsync
      • 6379 - Redis
      • 6667 - IRC
  • Linux PrivEsc
    • Checklist
    • Enumeration
      • Important files
      • Memory Dump
    • Privileges Exploitation
    • Wildcard Exploits
    • Sudo Exploits
    • Docker Container
    • Docker Groups
    • Common Exploits
  • Windows PrivEsc
    • Checklist
    • Enumeration
      • Important Files
    • Antivirus evasion tools
    • Unquoted paths
    • Always install elevated
    • Vulnerable services
    • Client side
    • Exploitable privileges
      • Juicy Potato
    • UAC bypass
    • Common Exploits
  • Active Directory
    • Introduction
    • Checklist
    • Enumeration
    • Enable RDP
    • Kerberos
    • Rubeus
    • Credentials harvesting
      • Domain Controller specific
    • Connection
    • Pass The Hash
    • Kerberoast
    • ASREProast
    • Tickets
  • Web Attacks
    • Checklist
    • Enumeration
      • URL bruteforcing
    • APIs and Fields
    • Authentication
    • Filter Evasion
      • Fuzzying and encoding
    • File Vulnerabilities
      • LFI List
      • PHP shells
    • RCE
    • Code Injection
    • Dependency Injection
    • Joomla
    • Wordpress
    • WebDAV
    • HTTP
    • XSS
      • DOM Based
      • Reflected
      • Filter Evasion
    • SSI
    • SSTI
    • RCE
    • CSRF
    • SQL injection
      • sqlmap
      • PostgreSQL
      • Oracle
      • MSSQL
      • MySQL
      • Login
    • XPath injection
    • XXE
    • CORS
  • MOBILE PENTESTING
    • Static Code Analysis
    • Dynamic Code Analysis
    • Network Traffic Analysis
Powered by GitBook
On this page
  • Login
  • Commands
  • Read Mail
  1. Networking
  2. Ports

143 993 - IMAP

Login

Basic

nc -nv <ip> 143

SSL

openssl s_client -connect <ip>:993 -quiet

Commands

APPEND                Appends the literal argument as a new message to the end of the specified destination mailbox. 	
AUTHENTICATE 	      Indicates a Simple Authentication and Security Layer (SASL) authentication mechanism to the server. 	
CAPABILITY 	      Requests a listing of capabilities that the server supports. 	
CHECK                 Requests a checkpoint of the currently selected mailbox. 	
CLOSE                 Permanently removes all messages that have the \Deleted flag set from the currently selected mailbox, and returns to the authenticated state from the selected state. 	
COPY/UID COPY         Copies the specified message(s) to the end of the specified destination mailbox. 	
CREATE                Creates a mailbox with the given name.
DELETE                Permanently removes the mailbox with the given name.
EXAMINE               Identical to SELECT and returns the same output; however, the selected mailbox is identified as read-only. 	
EXPUNGE               Permanently removes all messages that have the \Deleted flag set from the currently selected mailbox. 	
FETCH/UID FETCH       Retrieves data associated with a message in the mailbox. 
UID                   Unique identifier.
LIST                  Returns a subset of names from the complete set of all names available to the client. 	
LOGIN                 Identifies the client to the server and carries the plaintext password authenticating this user. 	
LOGOUT                Informs the server that the client is done with the connection. 
LSUB                  Returns a subset of names from the set of names that the user has declared as being “active” or “subscribed”. 	
NOOP                  Does nothing. It always succeeds.
RENAME                Changes the name of a mailbox.
SEARCH                Searches the mailbox for messages that match the given searching criteria. 	
SELECT                Selects a mailbox so that messages in the mailbox can be accessed. 
STORE                 Alters data associated with a message in the mailbox.
SUBSCRIBE             Adds the specified mailbox name to the server’s set of “active” or “subscribed” mailboxes as returned by the LSUB command. 	
UNSUBSCRIBE           Removes the specified mailbox name from the server’s set of “active” or “subscribed” mailboxes as returned by the LSUB command. 	

Read Mail

A1 LOGIN "<user>" "<pass>"
A1 SELECT INBOX
A1 FETCH 1:*
A1 FETCH <idx> all
A1 CLOSE
Previous135 137 139 - RPCNext161 - SNMP

Last updated 2 years ago