POP3

CheckList

• Check for version

• LFI chaining log file poisoning

• User enumeration

Try login and get the banner.

telnet INSERTIPADDRESS 110
USER [username]                    <-- Login Username
PASS [password]                    <-- Login Password
LIST                               <-- List messages
RETR [message number]              <-- Retrieve messages
QUIT                               <-- Quit