mirror of
https://github.com/dafthack/MailSniper
synced 2026-06-08 13:44:44 +00:00
Update README.md
This commit is contained in:
@@ -1,16 +1,18 @@
|
||||
# MailSniper
|
||||
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an Exchange administrator to search the mailboxes of every user in a domain.
|
||||
|
||||
For more information about MailSniper check out this [blog post](http://www.blackhillsinfosec.com/?p=5296).
|
||||
|
||||
MailSniper also includes additional modules for password spraying, enumerating users/domains, gathering the Global Address List from OWA and EWS, and checking mailbox permissions for every Exchange user at an organization.
|
||||
|
||||
For more information about the primary MailSniper functionality check out this [blog post](http://www.blackhillsinfosec.com/?p=5296).
|
||||
|
||||
For more information about additional MailSniper modules check out these blog posts:
|
||||
|
||||
- [GAL & Password Spraying](http://www.blackhillsinfosec.com/?p=5330)
|
||||
|
||||
- [Invoke-OpenInboxFinder](http://www.blackhillsinfosec.com/?p=5871)
|
||||
|
||||
Download the [MailSniper Field Manual](http://www.dafthack.com/files/MailSniper-Field-Manual.pdf) to quickly reference various MailSniper functions.
|
||||
|
||||
## Quick Start Guide
|
||||
There are two main functions in MailSniper. These two functions are **Invoke-GlobalMailSearch** and **Invoke-SelfSearch**.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user