smtp-vrfy-sweep.py

#!/usr/bin/python
import socket
import sys

if len(sys.argv) != 2:
    print "[*] Simple script to automate username discovery on SMTP server"
    print "[*] Usage: "+sys.argv[0]+" <ip range>"
    print "[*] Example: "+sys.argv[0]+"10.11.1.1-254"
    sys.exit(0)

ip_range = sys.argv[1]
ip_front = '.'.join(ip_range.split('-')[0].split('.')[:-1])
start = ip_range.split('-')[0].split('.')[-1]
end = ip_range.split('-')[1]

for i in range(int(start), int(end)+1):
    try:
        ip=ip_front+'.'+str(i)

        #Make a socket
        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

        #Connect to server
        print "[*] Establishing connection for "+ip+"..."
        connect = s.connect((ip,25))


        #Receive banner
        banner = s.recv(1024)
        print banner+"[*] Banner received, trying vrfy command..."

        #vrfy a user
        s.send('vrfy root \r\n')
        result = s.recv(1024)
        print result + "\n"

        #Close socket
        s.close()
    except KeyboardInterrupt:
        print "[*] Program exiting..."
        exit(0)
    except:
        print "[*] Connection failed for "+ip+"...\n"