See the Appendix for a full walk-through of using recon-ng Recommendation MAIL EXCHANGE RECORD SEARCH Summary MX, or Mail Exchange, records are required to be public for any domain you wish to receive email through. These records can still reveal sensitive information about your hosting set-up. MX Records can reveal vulnerable mail servers or information about other services hosted internally. Overview Determine an organization's email services. Explore any potential vulnerabilities. Materials Needed Considerations Walkthrough MX Record research reveals self-hosted email server at SampleOrg’s offices: mail.sample.org has address 256.0.0.3 Determine the authoritative name server(s) for the organization’s primary domain: Page 40 of 240