Skip to content

110 - Pentesting pop

Post Office Protocol (POP) is a type of computer networking and Internet standard protocol that extracts and retrieves email from a remote mail server for access by the host machine


sudo nmap -sS -sC -sV -p 110 $IP
sudo nmap --script "pop3-capabilities" -sV -p110 $IP
sudo nmap --script "pop3-ntlm-info" -sV -p110 $IP


POP commands:
  USER uid           Log in as "uid"
  PASS password      Substitue "password" for your actual password
  STAT               List number of messages, total mailbox size
  LIST               List messages and sizes
  RETR n             Show message n
  DELE n             Mark message n for deletion
  RSET               Undo any changes
  QUIT               Logout (expunges messages if no RSET)
  TOP msg n          Show first n lines of message number msg
  CAPA               Get capabilities


telnet $IP 110


netcat -n -v $IP 110


  • check bruteforce page for ideas