IMAP servers may support different capabilities. There is a command named CAPABILITY
that allows clients to list these supported mail server capabilities, and we can use Nmap to automate this task.
This recipe shows you how to list the capabilities of an IMAP server by using Nmap.
Open your favorite terminal and enter the following Nmap command:
$ nmap -p143,993 --script imap-capabilities <target>
The results will be included under the script output section:
993/tcp open ssl/imap Dovecot imapd |_imap-capabilities: LOGIN-REFERRALS completed AUTH=PLAIN OK Capability UNSELECT THREAD=REFERENCES AUTH=LOGINA0001 IMAP4rev1 NAMESPACE SORT CHILDREN LITERAL+ IDLE SASL-IR MULTIAPPEND
The script imap-capabilities
was submitted by Brandon Enright, and it attempts to list the supported functionality of IMAP servers by using the command CAPABILITY
defined in the RFC 3501.
The argument -p143,993 --script imap-capabilities
tells Nmap to launch the NSE script imap-capabilities
if an IMAP server is found running on port 143 or 993.
For cases where the IMAP server is running on a non-standard port you can use the port selection flag -p
, or enable Nmap's service detection:
#nmap -sV --script imap-capabilities <target>
18.226.187.24