Exchange_SSRF icon indicating copy to clipboard operation
Exchange_SSRF copied to clipboard

Published 20 hours ago • verified publisher icon Jumbo-WJB

Download MailboxDatabase

Open gonxaok opened this issue 3 years ago • 4 comments

its possible download a full mailbox DATABASE?

gonxaok avatar Oct 13 '21 22:10 gonxaok

you can try: python Exchange_SSRF_Attacks.py --target mail.exchange.com --action Download --email [email protected] and the folder parameter is optional, the default is inbox, you can try outbox --folder sentitems

Jumbo-WJB avatar Oct 14 '21 02:10 Jumbo-WJB

thanks you bro, its possible download full DB example: Exchange database.edb file ????

gonxaok avatar Oct 14 '21 02:10 gonxaok

Sorry, it is not supported yet

Jumbo-WJB avatar Oct 14 '21 02:10 Jumbo-WJB

To see the sent?

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <soapenv:Header> <fueloauth xmlns="https://exacttarget.com">***AUTH_TOKEN HERE***</fueloauth> </soapenv:Header> <soapenv:Body> <RetrieveRequestMsg xmlns="http://exacttarget.com/wsdl/partnerAPI"> <RetrieveRequest> <!-- Replace SentEvent with other desired metrics --> <ObjectType>SentEvent</ObjectType> <Properties>SubscriberKey</Properties> <Properties>TriggeredSendDefinitionObjectID</Properties> <Properties>SendID</Properties> <Properties>BatchID</Properties> <Properties>EventType</Properties> </RetrieveRequest> </RetrieveRequestMsg> </soapenv:Body> </soapenv:Envelope>

dodoaska avatar Oct 21 '21 12:10 dodoaska