Requirements ◦ Installation ◦ Usage ◦ Disclaimer ◦ Contact
xSMTP is a lightning fast, multithreaded scanner written in Python, capable of scanning massive network ranges and find open-relay and unsecured SMTP servers inside. ranges can be directly setted in the ranges.txt file or gathered by performing an ASN Lookup, the user can input any website in mind and the tool will make an API Call to external third party services ( ipinfo.io and api.hackertarget.com ) where all the IP Ranges of the website's ASN will be fetched and saved in ranges.txt file.
with the gathered ranges, xSMTP generates all available hosts and can perform a very fast check and see if hosts can listen on the most used smtp ports (2525,587..) and saves the good hosts on list.txt file, then a mass SMTP scan can be performed, where the tool will try to send a test email with the hosts gathered in list.txt containing the smtp info in the email body, if the smtp server is open-relay/unsecured!
obtained smtp will be in the following format:
IP:PORT
51.223.x.x:25
52.23.x.x:587
where the ip represents the smtp host followed by the smtp port, no auth or TLS connection is required , so you can set those off while sending with these smtps (if required by sending software set security to auto)
example of sending an email with open relay SMTP:
- Python v3.x+
- RDP/VPS ( Optional - suitable for scanning massive networks 5M Hosts + )
$ sudo apt-get update && sudo apt-get install python3 python3-pip -y
$ git clone https://github.com/c99tn/xSMTP
$ cd xSMTP/
$ python3 -m pip install -r requirements.txt
$ brew install python3
$ git clone https://github.com/c99tn/xSMTP
$ cd xSMTP/
$ python3 -m pip install -r requirements.txt
- Download and install python
- Download or clone the repo
- cd xSMTP/
- pip install requirements.txt
- py xsmtp.py
python3 xsmtp.py
> 1
Enter a website url:
> some-domain.com
> 2
[1] - Listen For Recommended Ports [2525,587]
[2] - Listen For All Ports [25,2525,465,587]
> 1
How many threads to use ?
(Recommended : 50)
> 50
> 3
Enter your email
> [email protected]
Enter Threads
> 50
Got a question ?
send me a dm on Telegram
xSMTP Bot was created for educational purposes only, Any actions and/or activities done using this bot is solely your responsibility.
Copyright (c) 2022 by @c99tn. Some rights reserved.
xSMTP is under the terms of the MIT License, following all clarifications stated in the license file.