mass-smtp-user-enum-bruteforce.sh

#!/bin/bash


t_command="VRFY RCPT EXPN";

function usage() {
    echo "Usage: "$0" <ip file> <wordlist>"
    if [ -n "$1" ] ; then
    	echo "Error: "$1"!"
    fi
    exit
}

if [ ! $# -eq 2 ] ; then
    usage
fi

src=$1
if [ ! -f $src ] ; then
  usage "ip file not found!"
fi

wordlist=$2
if [ ! -f $wordlist ] ; then
  usage "wordlist not found!"
fi

for ip in $(cat $src) ; do
  flag=0

  for c in $t_command ; do
    if [ $flag -eq 0 ] ; then
      output=`smtp-user-enum -M $c -u root -t $ip`
      res=`echo $output | egrep -o "[0-9]+ results" | cut -d ' ' -f 1`
      #echo $res

      if [ ! $res -eq 0 ] ; then
        flag=1
        smtp-user-enum -M $c -U $wordlist -t $ip
      fi
    fi
  done
done

exit