The Ethical Hacker Network

Latest Additions

Who's Online

Cabbage

Newbie

Offline

Posts: 6

Email Clicker

« on: September 05, 2012, 01:55:52 PM »

Hi All! I am trying to figure out a way to have all email sent to a certain email box (most likely in Out Look) which contains links to have the link automatically opened.

I'm thinking this is going to require at least 3 different processes.
1. Open the new email to the box
2. Find all URL links in email body
3. Initiate connection (navigate) to those URL links

Does anyone know of already existing software/scripts out there that can do this, or have tips on how I could perform this type of automation?


	Logged

ajohnson

Recruiters
Hero Member

Offline

Posts: 1057

aka dynamik

Re: Email Clicker

« Reply #1 on: September 05, 2012, 04:31:31 PM »

Does it have to be in Outlook? You could use something like http://docs.python.org/library/imaplib.html to pull in messages from a mail server. After that, it's relatively easy to parse for links and launch an external program (i.e. IE) while passing the URL as an argument. The example at the bottom of the page will actually take you most of the way there.


	Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.

tturner

Sr. Member

Offline

Posts: 432

Re: Email Clicker

« Reply #2 on: September 06, 2012, 08:43:18 AM »

This would be extremely useful for building bots for CTF if the CTF designer wants to allow client side attacks. Unfortunately most CTF's I've seen don't allow for this. My local DC group is designing a new CTF now and I think this will be pretty beneficial for us. Thanks for sharing!


	Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, OPSE, CSWAE, CSTP, VCP

WIP: OSWP, GSSP-JAVA, GXPN

Udacity on hold, again. I suck.

http://sentinel24.com/blog @tonylturner http://bsidesorlando.org

Cabbage

Newbie

Offline

Posts: 6

Re: Email Clicker

« Reply #3 on: September 07, 2012, 06:48:37 AM »

Quote from: ajohnson on September 05, 2012, 04:31:31 PM

Thanks I'll take a look at that. The problem I'm trying to solve is we are about to deploy an automated email analysis tool which will sandbox all attachments and will sandbox links once the users click on them. The problem is we would have to deploy an appliance at all our web gateways around the world to have the link piece work, while all of our email servers are in 1 country. SO if I can open all links in 1 country where the URL sandbox appliance is located the deployment wouldn't be as bad.