proto-smtp

Audits SMTP endpoints for STARTTLS, open-relay, and user enumeration risks.

Updated Jul 30, 2026

Search Tags:#security #email #encryption #smtp #pentest #dmarc

Ready to run

npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill proto-smtp

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: proto-smtp
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/proto-smtp
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill proto-smtp

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires nmap, dig, openssl, nc.

What problem does it solve?

This Skill addresses the critical need for verifying mail server security and anti-spoofing posture, ensuring that domains are protected against unauthorized relaying, spoofing, and cleartext credential exposure.

Core Features & Use Cases

Security Audit: Evaluates SMTP endpoints for STARTTLS encryption, open-relay vulnerabilities, and user enumeration risks.
Anti-Spoofing Validation: Audits SPF, DKIM, DMARC, and MTA-STS configurations to ensure domain integrity.
Use Case: A security engineer can use this tool to verify that a company's mail infrastructure is hardened against common threats and that all anti-spoofing records are correctly implemented and enforced.

Quick Start

Use the proto-smtp skill to perform a full security audit on the domain example.com and its associated mail servers.

Frequently Asked Questions about proto-smtp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit SMTP mail servers for security vulnerabilities and open-relay risks?▼

Auditing SMTP security involves evaluating endpoints for STARTTLS encryption, open-relay vulnerabilities, and user enumeration exposure. This process verifies that authorized mail infrastructure is hardened against unauthorized relaying and cleartext credential exposure.

How do I validate SPF, DKIM, and DMARC records to prevent domain spoofing?▼

Validating SPF, DKIM, and DMARC records ensures domain integrity by auditing anti-spoofing DNS configurations. This checks compliance with email authentication standards to prevent unauthorized mail relay and domain spoofing.

Can I check MTA-STS configuration compliance using nmap and dig?▼

Yes, you can check MTA-STS configuration compliance using nmap and dig. The assessment validates MTA-STS standards alongside SPF, DKIM, and DMARC to ensure domains are protected against spoofing and unauthorized relaying.

What is the best way to test STARTTLS encryption posture on SMTP endpoints?▼

Testing STARTTLS encryption posture on SMTP endpoints is best done through a comprehensive security assessment. This evaluates the encryption configuration of mail services to identify risks of cleartext credential exposure and ensure secure communication.

Do I need openssl and nc to perform a full SMTP anti-spoofing audit?▼

Yes, openssl and nc are required dependencies to perform a full SMTP anti-spoofing audit. These tools support the comprehensive evaluation of encryption posture, open-relay risks, and user enumeration exposure across authorized mail infrastructure.