Ross ROSS = Recommend OSS · open-source software intelligence for agents

dafthack/MailSniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain. observed · 2026-08-28

github.com/dafthack/MailSniper · PowerShell · MIT (permissive) observed · 2026-08-28

Health v2 · maintenance only

77/100

  • Activity 99
  • Release rhythm 35
  • Longevity 100

Flags: no_releases

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 3647
  • days_rel: n/a
  • days_push: 7
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

3276 stars · 597 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

MailSniper is a PowerShell-based penetration testing tool for searching email in Microsoft Exchange environments for sensitive terms like passwords and network details. It also includes modules for password spraying, user enumeration, GAL gathering, and mailbox permission checks.

Use cases

  • search exchange mailboxes for passwords during a pentest
  • search my own mailbox for sensitive terms via ews
  • password spray owa and ews endpoints
  • enumerate domain users from the global address list
  • find mailboxes with open inbox permissions
  • gather emails from all domain mailboxes as an exchange admin

When to choose

  • you are red-teaming or pentesting a Microsoft Exchange environment
  • you need to search mailboxes for credentials or insider intel
  • you want to test OWA/EWS for password spraying or user enumeration

When to avoid

  • you need a general-purpose email client or mail backup tool
  • your mail environment is not Microsoft Exchange/Office 365
  • you lack authorization to test the target environment

Facets

cli-tool · maturity active

penetration-testing search-engine security security penetration-testing email windows cli exchange ews email-search password-spraying red-team powershell

1 source

Member repositories

RepositoryRoleHealth v2
dafthack/MailSnipermain77

For agents

markdown · JSON · MCP: product_card(name="dafthack/MailSniper")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem