BBScute_POP3

POP3

---

Nmap discovered a POP3 service on the target ports 110 and 995 The running service is unknown at this time

┌──(kali㉿kali)-[~/PEN-200/PG_PLAY/bbscute]
└─$ nc -nv $IP 110 
(UNKNOWN) [192.168.239.128] 110 (pop3) open
+OK Hello there.
CAPA 
+OK Here's what I can do:
STLS
TOP
USER
LOGIN-DELAY 10
PIPELINING
UIDL
UTF8 USER
IMPLEMENTATION Courier Mail Server
.
 
user root
+OK Password required.
root
-ERR Invalid command.
USER root
+OK Password required.
PASS root
-ERR Login failed.
USER admin
+OK Password required.
PASS admin
-ERR Login failed.

No credential is known at this time

SSL

---

┌──(kali㉿kali)-[~/PEN-200/PG_PLAY/bbscute]
└─$ openssl s_client -connect $IP:995 -crlf -quiet                                                                                  1 ⨯
Connecting to 192.168.239.128
Can't use SSL_get_servername
depth=0 CN=localhost, OU=Automatically-generated POP3 SSL key, O=Courier Mail Server, L=New York, ST=NY, C=US
verify error:num=18:self-signed certificate
verify return:1
depth=0 CN=localhost, OU=Automatically-generated POP3 SSL key, O=Courier Mail Server, L=New York, ST=NY, C=US
verify error:num=10:certificate has expired
notAfter=Sep 17 16:28:06 2021 GMT
verify return:1
depth=0 CN=localhost, OU=Automatically-generated POP3 SSL key, O=Courier Mail Server, L=New York, ST=NY, C=US
notAfter=Sep 17 16:28:06 2021 GMT
verify return:1
+OK Hello there.
CAPA
+OK Here's what I can do:
TOP
USER
LOGIN-DELAY 10
PIPELINING
UIDL
UTF8 USER
IMPLEMENTATION Courier Mail Server

N/A