2KKUU7ita

Figure 13-7:
Using
EmailVerify
to verify
an e-mail
address.
Chapter 13: Communication and Messaging Systems
You might get bogus information from your server when performing these two
tests. Some SMTP servers (such as Microsoft Exchange) don’t support the
VRFY and EXPN commands, and some e-mail firewalls simply ignore them or
return false information.
Another way to somewhat automate the process is to use the EmailVerify
program in TamoSoft’s Essential NetTools (www.tamos.com/htmlhelp/
nettools/emailverify.htm). As shown in Figure 13-7, you simply enter
an e-mail address, click Start, and EmailVerify connects to the server and
pretends to send an e-mail.
Yet another way to capture valid e-mail addresses is to use theHarvester
(http://code.google.com/p/theharvester/) to glean addresses via
Google and other search engines. As I outline in Chapter 8, you can download
BackTrack Linux from www.backtrack-linux.org to burn the ISO image to
CD or boot the image directly through VMWare or VirtualBox. In the BackTrack
GUI, simply choose Backtrack➪Information Gathering➪SMTP➪Goog Mail
Enum and enter ./goog-mail.py –d -l 500 –b google, as
shown in Figure 13-8.
259