Does anyone happen to have a good guidline for pentesting a mail server?

other than books :p .. I am preparing one for a friend and I dont have time

what, you don't want to read a honkin huge book?

0daysecurity.com/penetration-testing/enumeration.html

^^ best guide i've found... and keep in mind some mail servers do it all

pentestlab.wordpress.com/2012/11/20/smtp-user-enumeration

^^ more indepth testing of SMTP

@Ohnana Grazie :3

what does it mean when I recieve "IP blocked" message when I try spoofing an email

SMTP enum^^

...i think it means exactly what it says. you're ip blocked.

do you have permission to test this host?

I mean is there any other way anyone aware of

yest

get a new IP

if you're coming from tor or a public proxy, that could be the problem

It is probably the countermeasure to avoid spoofing email through smtp tunnel

also check the country you're coming from, lots of people block china, et al

if it keeps happening, an IDS is probably freaking out and banning you

I tried different ips

I think the IDS blocks any IP that tries to send mails through smtp port 25 without authentication?

probably

I love it when things just work :D

@DavidFreitag Yet you use Windows.

fkin rekt

@Simon #worksforme

I don't think I've ever used a *nix OS that just worked. From my experience you always need to go in and tweak things to get them just right.

@Simon what do you use?

@DavidFreitag whereas on windows you just adjust to the shitty UI and that's that

@RоryMcCune Ubuntu with Unity vomits

@RоryMcCune Your mom wearing shorts.

@Ohnana Ever used Windows 10? Not a shitty UI.

I mean, sure it has shitty UI elements, but what OS doesn't?

@Simon pls tell me you're not a Unity user

@RоryMcCune #proudofit

@Simon Unity, the least Linux of Linux desktops

@RоryMcCune Yeah and he says there's something wrong with me for using Windows. Pfffft hoooookaaaay

A lack of configurability which would make iOS Proud

openbox is best DM

@RоryMcCune pls, all I need are workspaces, I don't care about the rest.

@Simon Windows has that

@Simon What about the fact that Unity sells all of your searches etc. to amazon?

@RоryMcCune Since when?

@Simon windows 10, get with the programme!

@Simon #rekt

@DavidFreitag /care

@DavidFreitag rekt? pls it took them 894723423 years to realize that people needed workspaces.

@Simon "pls, all I need are workspaces"

@Simon Right. I'm not saying M$ is perfect, definitely not that.

@DavidFreitag not quite. they weren't ads, it was a search engine

similar to the ones in internet browsers.

@Ohnana which showed you amazon products, after sending your keystrokes to amazon

as you typed into the search bar of your OS

when would I ever want that

@Ohnana #rekt

@RоryMcCune sending them to canonical, who then anonymized them and sent them to amazon

they wanted lens to be a big thing.

@Ohnana And you believe everything Canonical tells you?

@Ohnana ok so we're trusting canonical a company with whom you have no commercial relationship and who have more incentive to monetize your data (as they're running short of cash) instead of amazon...

@DavidFreitag they haven't endeared themselves to me lately.

@Ohnana it was a bad idea (tm)

^^^

@RоryMcCune i don't deny it. it was a bad idea because it's a useless feature

@Ohnana Useless to whom?

however, someone typing the names of linux programs repeatably is not something you can monetize

@Ohnana the only good thing about it is that it's relatively easy to disable

unlike some of MS' privacy nonsense

@RоryMcCune rm -rf /

and if you're searching for something on amazon, you're literally searching amazon. stfu.

@DavidFreitag Might need a sudo or two in there, this is Ubuntu we're talking

--no-preserve-root too

@Ohnana Done this before I take it

yes c:

the machine screamed as I killed it

my inclination to computer torture started at an early age

@Ohnana That's not killing a machine, it's more like giving it a lobotomy

close enough

Killing a machine would require a large quantity of thermite

IEnumerable<T> is literally the best thing ever.

Productive day

Happy happy joy joy

@MarkBuffalo Orlly?

Yeah, haven't been here all day lol

Had a lot of stuff to do

Although I did have time to make a tinfoil hat post

What's up, Dave?

@MarkBuffalo It just worked!

Connected the UI to the dll and they made sweet sweet love

Nice. What worked?

In my free time I'm rewriting the abomination that we got from those dudes in India from the ground up. I started with an asynchronous serial API

Nice, dude!

@MarkBuffalo um.

Well, actually both a synchronous one and an asynchronous one, but the synchronous one was super easy

@Ohnana #autocucumber

@Ohnana phoned

lol

That way if we run into problems later down the road with async communication I can just force it back to use the synchronous API

@DavidFreitag the one I uploaded to thing land is also asynchronous. I love asynchronous thingies

Yeah especially when the UI is doing work, it takes about a second for a serial transaction, and nobody wants to use a piece of software that locks up for a second every time you hit a button

Lol, I know

Or wait several seconds when the software opens frozen because it's reading data over serial

I hate that

That's what our "software" currently does

Get a spinny wheel for ~10 seconds

Makes me crazy

Lol

Presentation time. Back in a bit

@MarkBuffalo Get that powerpoint on bruh

Totes going to be doing JSON serialization instead of SQLite

@Ohnana C# generics are really a disguised preprocessor (and so are C++ templates).

@ThomasPornin i figured it was something like that

There was an old preprocessor-based version for C, but I don't find it. It would kill just about any C compiler, although it could theoretically be evaluated efficiently, resulting in a small source, if the preprocessor used lazy evaluation.

Not a lot of people implement C preprocessors in Haskell, though.

when i was just learning C++ doing preprocessor statements like defines and the like were a cheap source of entertainment

@Ohnana Yeah well preprocessor magic is an abomination that should die

@DavidFreitag aw i thought you'd like finicky archaic bullshit

There is a USB stack for 8bit/32Bit AVR microcontrollers that is almost entirely composed of preprocessor magic

@Ohnana I'm totally ok with preprocessor defines, in fact I use them all the time. I said preprocessor magic

The sort where you have 15-20 levels of defines to actually sort out what is happening

@DavidFreitag oh yeah

that is bullshit

we just did simple word replaces

Basically the sort of thing where someone thought they were being very clever

Also this is terrible

public void someFunction()
{
    if (someComplicatedStatement)
        foreach (thing item in someShit)
        {
            ... (30 lines)
        }
}

@Ohnana Also, what would make you think that?

@DavidFreitag you like hardware ;P

i'm just ribbing you

@Ohnana What does hardware have to do with being a #fogey?

@Ohnana Well you're not doing a very good job.

hardware is weird, archaic, and bullshitty

You obviously don't know hardware very well.

However, I will concede that it takes some level of black magic to get hardware right

imgur.com/gallery/HzUOo

@DavidFreitag that is a true statement.

i was hoping to push your buttons with ignorance

you are too good

I'm in a good mood

You can push every button and the only thing that will come out is joy

Me too. Learned something at code review

I'm beaming

aw yay :)

i just found out that i get to go on my first business trip with a guy that's really cool

SOOOOOO i am also happy

hugs all around!

@Ohnana \o/

God it's freeeeeeeeeezing in here

My teeth are chattering

David wtf working conditions

Wtf

@Ohnana huggies

@MarkBuffalo :|

huggles, you mean?

Huggle? That sounds like some form of STD

whatever group hug

Awww yiss

Huggies means cute hugs

Just so y'all know, I went and banned @Simon from chat, for being a dumbass.

D:

NO

SAY YOU'RE JOKING

heh, no, of course not

of course I am joking

@Ohnana pls, @AviD abuse mod powers? Of course not.

I didn't kick him for that, I kicked him for being canadian.

@AviD imagine me flipping you off with three hands

@DavidFreitag hey watch it, I'm on a roll with the banning.

@Ohnana heh, that's some trick.

@AviD Fallout mutations

that's one possible explanation.

Imagine someone running at you with three ballistic fists.

I don't know about you, but I'd be shitting bricks.

@DavidFreitag I assumed the middle hand wasnt a fist

@AviD Well yeah but it could be fist shaped

@DavidFreitag ... I don't think we're saying the same thing

@AviD Are you sure?

I have no clue

@AviD For the record, a ballistic fist is an unarmed weapon in Fallout New Vegas:

> The ballistic fist is one of the most powerful Unarmed weapons in the game. It consists of a wrist-mounted shotgun, with a pressure plate trigger worn over the knuckles, which fires when a punch connects with the target. This amplifies the damage given due to the power of the user's fists and the deadly ballistics from the mounted gun.

"unarmed weapon"??

@DavidFreitag that... does not sound safe.

@AviD Yeah it basically explodes when you punch someone. With the bloody mess perk they basically evaporate in front of you.

uhhhmm.... if you have a shotgun, why are you punching him?

> This amplifies the damage given due to the power of the user's fists and the deadly ballistics from the mounted gun.

> deadly ballistics from the mounted gun

@AviD Yeah and shotguns do the most damage the closer you are, you couldn't get much closer if you're close enough to punch someone

Also there's the added challenge of getting to your opponent.

Some people like that sort of thing.

Mmmm fig newbens

so much better than oldbens

@AviD A newben is extremely similar to a newton. In fact the only difference is that a newben is a completely fictional unit of measure.

Duuuuuuuuuuuuuuuuuuuuuud

Duuuuuuuuuuuuuuuuuuuuude

My wife made.... hong shao rou

@MarkBuffalo cmon man, TMI.

google.com/…

This

BACON GIBLETS

BETTER THAN BACON FOREVER

savory bacon giblets that melt in your mouth

No food with the word "Giblet" in the name will ever get put in my mouth.

PUT IT IN YOUR MOUTH NOW, DAVID!!!!!!!!!!!!!!!!!!

Hey, I know better than to take a man's bacon

They aren't really giblets

They're just bacon steaks cut correctly and prepared differently

@MarkBuffalo full size gibbles?

Yashure

I haven't had this in almost 4 years

I feel like crying

@MarkBuffalo That's probably because your cholesterol will be over 9000 when you're done eating.

It'll be fine

@DavidFreitag looks at your plate You gonna eat that?

@AviD lulz you mong

Did you actually read the whole transcript?

@Simon of course I did

not

only the ones where I was pinged

Ahhhh ohnuhnuh ping'd you right after, I see.

@Simon I can also search for ovid