Skip to content

sensepost/thumbscr-ews

Repository files navigation


📧 Thumbscr-EWS

A wrapper around the amazing exchangelib to do some common EWS operations.

@_cablethief cablethief/thumbscr-ews


Introduction

thumbscr-ews is a small Python utility used with Exchange Web Services. Using thumbscr-ews, it is possible to read and search through mail, retrieve the Global Address List, and download attachments. A lot of inspiration taken from MailSniper

Features

With thumbscr-ews, you can:

  • Read emails.
  • Search for strings in emails.
  • Download attachments for emails.
  • Dump the GAL
  • Check for delegated access.

Often times exchange is misconfigured allowing for EWS to bypass 2FA requirements.

Usage

Please see Usage.md.

Installation - docker

A docker container for thumbscr-ews exists and can be used with:

docker run --rm -ti cablethief/thumbscr-ews

If you do not want the docker to complain about timezones, set the TZ environment variable:

docker run --rm -ti -e TZ=Europe/London cablethief/thumbscr-ews 

Installation - Other

You can install locally using:

python setup.py install

Pics

Todo

  • Implement more MailSniper functions