Skip to content

sensepost/thumbscr-ews

Repository files navigation


📧 Thumbscr-EWS

A wrapper around the amazing exchangelib to do some common EWS operations.

@_cablethief cablethief/thumbscr-ews


Introduction

thumbscr-ews is a small Python utility used with Exchange Web Services. Using thumbscr-ews, it is possible to read and search through mail, retrieve the Global Address List, and download attachments. A lot of inspiration taken from MailSniper

Features

With thumbscr-ews, you can:

  • Read emails.
  • Search for strings in emails.
  • Download attachments for emails.
  • Dump the GAL
  • Check for delegated access.

Often times exchange is misconfigured allowing for EWS to bypass 2FA requirements.

Usage

Please see Usage.md.

Installation - docker

A docker container for thumbscr-ews exists and can be used with:

docker run --rm -ti ghcr.io/sensepost/thumbscr-ews:master

If you do not want the docker to complain about timezones, set the TZ environment variable:

docker run --rm -ti -e TZ=Europe/London ghcr.io/sensepost/thumbscr-ews:master

Installation - Other

You can install locally using:

python setup.py install

Pics

Todo

  • Implement more MailSniper functions

About

Exchangelib wrapper for pentesting

Resources

Stars

Watchers

Forks

Packages

 
 
 

Contributors 4

  •  
  •  
  •  
  •