bugtraq - Remote SMTP authentication audit tool?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <B670D7859C2557418D229D3C444A83EB1DCDE1@exc-svr1-lfs.lfs.titan.1sourcing.net>
Date: Wed, 2 Jun 2004 14:30:32 -0400
From: "Byron Pezan" <mbp@...bit.net>
To: <bugtraq@...urityfocus.com>
Subject: Remote SMTP authentication audit tool?

I have found that several spammers are exploiting weak or non-existent passwords on some MS Exchange servers using external SMTP authentication.  I have also found out (through Tech Net) how to turn on logging for SMTP authentication and see what account is being abused for this purpose.  However, this is too reactive of an approach.  Does anyone know of a way or a tool to audit existing servers for weak or non-existent SMTP passwords?

byron