
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Email verified which does correct SMTP conversation: HELO / MAIL FROM / RCPT TO
SMTP Email Verifier makes correct SMTP conversation to verify email address or list of addresses
This tool could be slow - it's not working parallel.
verifier prints successfully verified email addresses to stdout, and failed addresses (and reason) to stderr.
Because many other verifiers are working incorrectly, e.g. They use incorrect HELO
host, do not issue MAIL FROM
command before RCPT TO
and on some mailserver this makes incorrect result (e.g. RCPT TO fails because of missed MAIL FROM, but not because something wrong with recipient).
SMTP Email verifier:
HELO
/ MAIL FROM
/ RCPT TO
pipx install smtp-email-verifier
$ email_verifier yaroslaff@gmail.com
yaroslaff@gmail.com
$ email_verifier yaroslaff-nosuchemail@gmail.com > /dev/null
yaroslaff-nosuchemail@gmail.com: RCPT TO error: 550 b"5.1.1 The email account that you tried to reach does not exist. Please try\n5.1.1 double-checking the recipient's email address for typos or\n5.1.1 unnecessary spaces. For more information, go to\n5.1.1 https://support.google.com/mail/?p=NoSuchUser 41be03b00d2f7-78e43192d3esi9685918a12.435 - gsmtp"
Optionally provide options --helo HOSTNAME
and --from ADDRESS
.
# See verification status for each email address
$ email_verifier -f /tmp/test.txt
aaa@example.com: DNS error for example.com
bbb@example.com: DNS error for example.com
yaroslaff@gmail.com
# Get only verified emails
$ email_verifier -f /tmp/test.txt 2> /dev/null
yaroslaff@gmail.com
# Or with redirections and custom HELO and MAIL FROM address
$ email_verifier -f /tmp/test.txt --helo localhost --from noreply@example.com > /tmp/test-ok.txt 2> /tmp/test-fail.txt
# now get all failed addresses:
$cut -f 1 -d: < /tmp/test-fail.txt
If you want to see how exactly verification happens for email address, use -v
/ --verbose
:
$ email_verifier -v yaroslaff@gmail.com --helo localhost --from noreply@example.com
# Verifying yaroslaff@gmail.com
connect: to ('gmail-smtp-in.l.google.com.', 25) None
reply: b'220 mx.google.com ESMTP 38308e7fff4ca-2eee192b083si25595201fa.355 - gsmtp\r\n'
reply: retcode (220); Msg: b'mx.google.com ESMTP 38308e7fff4ca-2eee192b083si25595201fa.355 - gsmtp'
connect: b'mx.google.com ESMTP 38308e7fff4ca-2eee192b083si25595201fa.355 - gsmtp'
send: 'helo localhost\r\n'
reply: b'250 mx.google.com at your service\r\n'
reply: retcode (250); Msg: b'mx.google.com at your service'
send: 'mail FROM:<noreply@example.com>\r\n'
reply: b'250 2.1.0 OK 38308e7fff4ca-2eee192b083si25595201fa.355 - gsmtp\r\n'
reply: retcode (250); Msg: b'2.1.0 OK 38308e7fff4ca-2eee192b083si25595201fa.355 - gsmtp'
send: 'rcpt TO:<yaroslaff@gmail.com>\r\n'
reply: b'250 2.1.5 OK 38308e7fff4ca-2eee192b083si25595201fa.355 - gsmtp\r\n'
reply: retcode (250); Msg: b'2.1.5 OK 38308e7fff4ca-2eee192b083si25595201fa.355 - gsmtp'
send: 'quit\r\n'
reply: b'221 2.0.0 closing connection 38308e7fff4ca-2eee192b083si25595201fa.355 - gsmtp\r\n'
reply: retcode (221); Msg: b'2.0.0 closing connection 38308e7fff4ca-2eee192b083si25595201fa.355 - gsmtp'
yaroslaff@gmail.com
FAQs
Email verified which does correct SMTP conversation: HELO / MAIL FROM / RCPT TO
We found that smtp_email_verifier demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.