“smtp”的搜索结果

Assess mail server security by checking unauthorized relaying, exposed user accounts, weak authentication, encryption, and sender verification records. This skill guides SMTP testing and helps organize findings into an assessment report with practical configuration improvements.

中文简介正在准备中。当前显示英语简介。

• Check whether a mail server permits unauthorized relaying
• Assess exposure of user accounts and weak authentication
• Review TLS and SPF, DKIM, and DMARC settings

通过命令行工具himalaya，让代理管理支持IMAP/SMTP的邮件账户，完成邮件列表查看、搜索、撰写、回复、转发及文件夹整理。

• 按发件人和主题查找邮件
• 撰写、回复或转发邮件
• 在文件夹之间移动或复制邮件

This skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners", "brute force email credentials", or "assess mail server security". It provides comprehensive techniques for testing SMTP server security.

中文简介正在准备中。当前显示原文说明。

通过终端搜索、阅读、撰写、回复和转发邮件，并整理文件夹。支持切换多个账户、保存附件及以JSON格式获取邮件列表，便于程序读取。

• 按发件人或主题查找邮件
• 回复或转发邮件
• 移动邮件并管理已读状态

Read and send email via IMAP/SMTP. Check for new/unread messages, fetch content, search mailboxes, mark as read/unread, and send emails with attachments. Works with any IMAP/SMTP server including Gmail, Outlook, 163.com, vip.163.com, 126.com, vip.126.com, 188.com, and vip.188.com.

中文简介正在准备中。当前显示原文说明。

Identify and exploit SMTP Open Relays. This skill teaches how to test mail servers to determine if they process email delivery regardless of the sender or recipient domain, enabling attackers to spoof internal addresses and bypass basic anti-phishing controls.

中文简介正在准备中。当前显示原文说明。

Email infrastructure security audit. Tests SPF, DKIM, DMARC configuration, open relay, email spoofing resilience, S/MIME, MTA-STS, TLS-RPT, and SMTP security. Uses swaks, dnsrecon, nmap SMTP scripts, smtp-user-enum, and dig. Pure skill markdown — no new infrastructure needed.

中文简介正在准备中。当前显示原文说明。

Organize authorized phishing exercises from sending infrastructure and email scenarios to landing pages and reporting. Uses GoPhish campaign tracking to review opens, clicks, and submissions while assessing employee awareness and email security controls.

中文简介正在准备中。当前显示英语简介。

• Planning an authorized phishing exercise
• Preparing sending infrastructure and landing pages
• Reviewing email, QR code, and callback scenarios

Send emails via SMTP (Gmail, Outlook, etc.). Supports attachments, HTML content, and multiple recipients. Use when user asks to send email, compose email, or email someone.

中文简介正在准备中。当前显示原文说明。

Deep OSINT reconnaissance using the MITRE ATT&CK Reconnaissance framework. Email harvesting with SMTP verification, subdomain takeover detection, certificate transparency mining, Shodan/Censys intelligence, Wayback Machine historical analysis, social media profiling, cloud storage enumeration, document metadata extraction, DNS history, credential leak checks, and passive infrastructure mapping. Uses theHarvester, amass, dnsrecon, fierce, dnstwist, dmitry, whatweb, wafw00f, exiftool, metagoofil, smtp-user-enum, swaks, waybackurls, subfinder, and crt.sh. Pure reconnaissance — no active exploitation. Produces: confidence-scored findings, infrastructure diagram, employee roster, email pattern confirmation, subdomain takeover candidates. Chains into /pentester for active testing.

中文简介正在准备中。当前显示原文说明。

PCAP/network capture analizi — Wireshark, tshark, Python scapy/pyshark ile SMTP/FTP/DNS/custom protokol çözme, gizli veri çıkarma.

中文简介正在准备中。当前显示原文说明。

Himalaya CLI: IMAP/SMTP email from terminal.

中文简介正在准备中。当前显示原文说明。

查找收集并公开个人信息的数据经纪商和人物搜索网站，在取得本人同意后管理删除申请、跟踪进度、核实删除结果，并定期监测信息是否重新出现。

• 查找公开个人信息的网站
• 管理已获同意的家人信息删除申请
• 跟踪申请进度并核实删除结果

为AI智能体创建专用邮箱，收发邮件并处理回复和附件。还可查看邮件中的一次性验证码，并设置收到新邮件后继续执行任务的流程。

• 创建AI智能体专用邮箱地址
• 发送邮件并处理回复与附件
• 查看邮件中的验证码

Check whether an application is ready for production by finding unfinished code and testing real database and API connections. Review performance under load, authentication, environment settings, and deployment behavior to identify gaps before release.

中文简介正在准备中。当前显示英语简介。

• Finding unfinished code before release
• Testing real database and API integrations
• Checking performance under concurrent requests

Configure Fail2ban to detect port scans, repeated SSH login attempts, and suspicious web requests from server logs. Create custom detection patterns, automatically block source IP addresses, and set up notifications and longer bans for repeat offenders.

中文简介正在准备中。当前显示英语简介。

• Automatically blocking port scans against public servers
• Defending SSH against repeated login attempts
• Detecting suspicious paths in Nginx access logs

Deploy decoy files and monitor changes, renames, and deletions for early signs of ransomware. This skill guides Python monitoring, email, Slack, and syslog alerts, plus simulated file operations to verify that the detection and notification pipeline works.

中文简介正在准备中。当前显示英语简介。

• Monitoring shared drives and NAS for suspicious file changes
• Adding decoy file monitoring alongside endpoint protection
• Testing incident response with decoy file triggers

Monitor public Certificate Transparency logs, which record TLS certificates, to spot unexpected issuance and discover subdomains. Use crt.sh data to maintain a certificate inventory, check domain findings against DNS, and configure alerts for suspicious activity.

中文简介正在准备中。当前显示英语简介。

• Monitoring owned domains for unexpected certificate issuance
• Discovering subdomains and checking their DNS records
• Investigating certificates for look-alike domains

Connect NanoClaw agents to DeltaChat for email-based messaging with end-to-end encryption. Set up direct chats or small group conversations, exchange file attachments, and link each chat to the appropriate agent group.

中文简介正在准备中。当前显示英语简介。

• Chatting with a personal assistant through DeltaChat
• Using an agent in a small DeltaChat group
• Exchanging files with an agent in chat

Set up and troubleshoot the WizTelemetry Notification extension for KubeSphere. Configure delivery channels such as email and Slack, route alerts by labels, silence notifications for scheduled periods, and search notification history to investigate delivery problems.

中文简介正在准备中。当前显示英语简介。

• Configuring email or Slack alert delivery
• Routing alerts by severity or namespace
• Silencing notifications during maintenance

Supports authorized security exercises that test data transfer outside a network. Organizes channel choices, compression, encryption, splitting, and receipt verification, alongside the monitoring signals defenders can use to identify different transfer methods.

中文简介正在准备中。当前显示英语简介。

• Comparing data transfer channels for an authorized exercise
• Planning compression, encryption, and file splitting
• Verifying received files against SHA-256 records

Traffic analysis and PCAP forensics playbook. Use when analyzing network captures including Wireshark filters, protocol analysis (HTTP/DNS/FTP/SMTP/USB/WiFi), data extraction, covert channel detection, PCAP repair, TLS decryption, and tshark command-line analysis.

中文简介正在准备中。当前显示原文说明。

Email header injection and spoofing playbook. Use when testing contact forms, email APIs, password reset flows, or any feature that constructs SMTP messages with user-controlled fields. Covers CRLF injection in headers, SPF/DKIM/DMARC bypass, and phishing amplification.

中文简介正在准备中。当前显示原文说明。

Java "Ghost Bits" / Cast Attack playbook (Black Hat Asia 2026). Use when attacking Java services where 16-bit char is silently narrowed to 8-bit byte to bypass WAF/IDS for SQL injection, deserialization RCE, file upload (Webshell), path traversal, CRLF injection, request smuggling, and SMTP injection. Affects Tomcat, Spring, Jetty, Undertow, Vert.x, Jackson, Fastjson, Apache Commons BCEL, Apache HttpClient, Angus Mail, JDK HttpServer, Lettuce, Jodd, XMLWriter and re-enables many "patched" CVEs through WAF bypass.

中文简介正在准备中。当前显示原文说明。