this post was submitted on 22 Jun 2024
25 points (87.9% liked)

Linux

5230 readers
226 users here now

A community for everything relating to the linux operating system

Also check out !linux_memes@programming.dev

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 1 year ago
MODERATORS
Ategon@programming.dev
anzo@programming.dev
dwraf_of_ignorance@programming.dev
25
A tool on Linux to scan for inboxes on other mailservers? (slrpnk.net)
submitted 4 months ago* (last edited 4 months ago) by boredsquirrel@slrpnk.net to c/linux@programming.dev
11 comments fedilink hide all child comments
 

I know this is basically a spam tool.

I think to know that you can query some info from a mailserver to test if an address exists.

I would like to find hidden addresses of some companies, for example I want to test if info@companyname.com exists.

Anyone know how to do that?

Update

I learned quite a bit

  • Mailserver block the requests that are used to get a list of inboxes ("accounts")
  • many servers will block mailservers that are not on an allowlist
  • many servers will block servers, if mails were sent to nonexistent addresses a couple of times
  • the message "recipient not known" will not appear often, as servers may "black hole" a senders mail and cut off the connection without sending the status message back
you are viewing a single comment's thread
view the rest of the comments
[โ€“] boredsquirrel@slrpnk.net 1 points 4 months ago (1 children)

Damn, thanks for the info.

Definetly not wanting to land on a spam list...

So I will test the mails with burner accounts? Which would be a bit sus, but I could just write "DO YOU WANT TO STRENGTHEN YOUR ERECTION" and that would end in spam anyways

[โ€“] schwim@lemm.ee 4 points 4 months ago* (last edited 4 months ago)

That might not work either. If a server marks it as spam, we do something called blackholing the email, meaning we discard the email and close the connection without responding to the sending server. This is done in an effort to provide as little info as possible to a bad actor.

If you don't send an email from a server and address deemed reputable and with a low enough spam score, you'll be shut down by more than 95% of the mail servers out there.