Browse Exploit & Auxiliary Modules

The Metasploit Project hosts the world's largest database of quality assured exploits, including hundreds of remote exploits, auxiliary modules, and payloads. You can even review the Metasploit Framework source code of any module - or write your own.

Search for modules

POP3 Login Utility

This module attempts to authenticate to an POP3 service.


Rank

  • Normal

Authors

  • ==[ Alligator Security Team ]== < >
  • Heyder Andrade < heyder [at] alligatorteam.org >

References


Development


Similar Modules


Usage Information

$ msfconsole

                ##                          ###           ##    ##
 ##  ##  #### ###### ####  #####   #####    ##    ####        ######
####### ##  ##  ##  ##         ## ##  ##    ##   ##  ##   ###   ##
####### ######  ##  #####   ####  ##  ##    ##   ##  ##   ##    ##
## # ##     ##  ##  ##  ## ##      #####    ##   ##  ##   ##    ##
##   ##  #### ###   #####   #####     ##   ####   ####   #### ###
                                      ##

msf > use auxiliary/scanner/pop3/pop3_login
msf auxiliary(pop3_login) > set RHOSTS [TARGET HOST RANGE]
msf auxiliary(pop3_login) > run


Module Options

BLANK_PASSWORDS Try blank passwords for all users (default: true)
BRUTEFORCE_SPEED How fast to bruteforce, from 0 to 5 (default: 5)
PASSWORD A specific password to authenticate with
PASS_FILE The file that contains a list of probable passwords. (default: /home/svn/jobs/msf3/data/wordlists/unix_passwords.txt)
RHOSTS The target address range or CIDR identifier
RPORT The target port (default: 110)
STOP_ON_SUCCESS Stop guessing when a credential works for a host
THREADS The number of concurrent threads (default: 1)
USERNAME A specific username to authenticate as
USERPASS_FILE File containing users and passwords separated by space, one pair per line
USER_AS_PASS Try the username as the password for all users (default: true)
USER_FILE The file that contains a list of probable users accounts. (default: /home/svn/jobs/msf3/data/wordlists/unix_users.txt)
VERBOSE Whether to print output for all attempts (default: true)
CHOST The local client address
CPORT The local client port
ConnectTimeout Maximum number of seconds to establish a TCP connection
MaxGuessesPerService Maximum number of credentials to try per service instance. If set to zero or a non-number, this option will not be used.
MaxGuessesPerUser Maximum guesses for a particular username for the service instance. Note that users are considered unique among different services, so a user at 10.1.1.1:22 is different from one at 10.2.2.2:22, and both will be tried up to the MaxGuessesPerUser limit. If set to zero or a non-number, this option will not be used.
MaxMinutesPerService Maximum time in minutes to bruteforce the service instance. If set to zero or a non-number, this option will not be used.
Proxies Use a proxy chain
REMOVE_PASS_FILE Automatically delete the PASS_FILE on module completion
REMOVE_USERPASS_FILE Automatically delete the USERPASS_FILE on module completion
REMOVE_USER_FILE Automatically delete the USER_FILE on module completion
SSL Negotiate SSL for outgoing connections
SSLVersion Specify the version of SSL that should be used (accepted: SSL2, SSL3, TLS1)
ShowProgress Display progress messages during a scan
ShowProgressPercent The interval in percent that progress should be shown
WORKSPACE Specify the workspace for this module
TCP::max_send_size Maxiumum tcp segment size. (0 = disable)
TCP::send_delay Delays inserted before every send. (0 = disable)