# dafthack/MailSniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

Repository: https://github.com/dafthack/MailSniper
Canonical: https://ross.abutalabs.com/products/mailsniper
Language: PowerShell
License: MIT
License Family: permissive
Last push: 2026-08-26T18:09:38+00:00

## Health v2 (maintenance only)
Score: 77/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 35, longevity 100
- inputs: {"age_days": 3647, "days_push": 7, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3276, forks 597 (observed 2026-08-28T04:07:53.294045+00:00)

## What it is
MailSniper is a PowerShell-based penetration testing tool for searching email in Microsoft Exchange environments for sensitive terms like passwords and network details. It also includes modules for password spraying, user enumeration, GAL gathering, and mailbox permission checks.

## Use cases
- search exchange mailboxes for passwords during a pentest
- search my own mailbox for sensitive terms via ews
- password spray owa and ews endpoints
- enumerate domain users from the global address list
- find mailboxes with open inbox permissions
- gather emails from all domain mailboxes as an exchange admin

## When to choose
- you are red-teaming or pentesting a Microsoft Exchange environment
- you need to search mailboxes for credentials or insider intel
- you want to test OWA/EWS for password spraying or user enumeration

## When to avoid
- you need a general-purpose email client or mail backup tool
- your mail environment is not Microsoft Exchange/Office 365
- you lack authorization to test the target environment

## Facets
- artifact type: cli-tool
- maturity: active
- function: penetration-testing, search-engine, security
- domain: security, penetration-testing, email
- platform: windows, cli
- tags: exchange, ews, email-search, password-spraying, red-team, powershell

## Member repositories
- dafthack/MailSniper (main) score 77

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:53.294045+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:43:22.110995+00:00, confidence not recorded.
  - readme: https://github.com/dafthack/MailSniper (fetched 2026-08-28T04:07:53.294045+00:00, sha 02338fd25f49)
- Data as of 2026-08-30T08:39:29.467469+00:00.