Audits SMTP endpoints for STARTTLS, open-relay, and user enumeration risks.
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill proto-smtp
Please help me install this Agent Skill. Skill: proto-smtp Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/proto-smtp Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill proto-smtp
This Skill addresses the critical need for verifying mail server security and anti-spoofing posture, ensuring that domains are protected against unauthorized relaying, spoofing, and cleartext credential exposure.
Use the proto-smtp skill to perform a full security audit on the domain example.com and its associated mail servers.
High-intent search queries and answers about installing and using this skill.
Auditing SMTP security involves evaluating endpoints for STARTTLS encryption, open-relay vulnerabilities, and user enumeration exposure. This process verifies that authorized mail infrastructure is hardened against unauthorized relaying and cleartext credential exposure.
Validating SPF, DKIM, and DMARC records ensures domain integrity by auditing anti-spoofing DNS configurations. This checks compliance with email authentication standards to prevent unauthorized mail relay and domain spoofing.
Yes, you can check MTA-STS configuration compliance using nmap and dig. The assessment validates MTA-STS standards alongside SPF, DKIM, and DMARC to ensure domains are protected against spoofing and unauthorized relaying.
Testing STARTTLS encryption posture on SMTP endpoints is best done through a comprehensive security assessment. This evaluates the encryption configuration of mail services to identify risks of cleartext credential exposure and ensure secure communication.
Yes, openssl and nc are required dependencies to perform a full SMTP anti-spoofing audit. These tools support the comprehensive evaluation of encryption posture, open-relay risks, and user enumeration exposure across authorized mail infrastructure.
zebbernIdentify SMTP server vulnerabilities and misconfigurations across mail infrastructures.
blamejsAudit SMTP, IMAP, POP3, ManageSieve, and mailbox-DAV listeners for protocol-layer security gaps.
EntroVyxExecute high-speed port scanning and service enumeration across large IP ranges.
AgentientEnforce IAM least privilege, VPC security, and Secret Manager usage on Google Cloud Platform.
