AD Privilege Escalation
  • Iperius Backup Service Privilege Escalation
  • ManageEngine ADSelfService Plus PrivEsc
  • Mimikatz
  • Outlook Reminder Privilege Escalation
  • UAC Windows Privilege Escalation
  • Windows PrivEsc with Kerberos
  • Windows PrivEsc with LocalPotato
  • Windows PrivEsc with Registry Keys
  • Windows PrivEsc with RemotePotato
  • Windows PrivEsc with SeBackupPrivilege
  • Windows PrivEsc with Unquoted Service Path
  • Windows Privilege Escalation
  • Windows Pivoting
  • AD CS (Active Directory Certificate Services) Pentesting
  • Dumping Windows Password Hashes
  • WSL Pentesting
  • Windows Memory Dump Analysis
  • Windows Remote Code Execution from Linux
  • Windows XML EventLog (EVTX)
  • M365 (Microsoft Office 365) Pentesting
  • Microsoft Outlook Message (.msg)
  • Microsoft Word Pentesting
  • Reading OneDrive Logs
Powered by GitBook
On this page
  • Decrypt & Open in Linux
  • Extract Attached Files

Microsoft Outlook Message (.msg)

The .msg file is used to represent individual email messages, appointments, contacts, tasks, and so on in the file system.

PreviousM365 (Microsoft Office 365) PentestingNextMicrosoft Word Pentesting

Last updated 1 year ago

sudo apt-get install libemail-outlook-message-perl libemail-sender-perl
msgcovert example.msg
open example.eml
Copied!

If the message is attached some file e.g. .zip, we can extract the file.

For example,

Content-ID: 
Content-Type: application/octet-stream; name=example.zip
Content-Disposition: attachment; filename=example.zip
Content-Transfer-Encoding: base64

UEsDBBQAAAAIAJBsAVWzNSwXM3oTAAAQ8QANAAAAc2VjdXJpdHkuZXZ0eOxdCXxVxdU/b8nLRhZk
R5aAoqINJISwChISAlSQCEHFUjCQxABJwCTsLnHBtSpabW2t1rpVu1g/97pVa22prRqXKrW0ta1t
...
6Vf33X5WvnNm5rx7373vvnffct97I==
Copied!

After baking, we should get the attached file and download it.

Decrypt & Open in Linux
Extract Attached Files
1. In CyberChef, paste the text contains Base64 encoded.
2. Attach “Base64” and “Extract Files” operations.
Page cover image