Re: Sniffing email attachments

[Nikhil Wagholikar <visitnikhil () gmail com>]

Hi sfmailsbm,

You can give a try to program called 'mailsnarf'.

More Info: http://linux.die.net/man/8/mailsnarf

Best of Luck!!
---
Nikhil Wagholikar
Practice Lead | Security Assessments & Digital Forensics
Network Intelligence (I) Pvt. Ltd. [NII Consulting]
Web: http://www.niiconsulting.com/
Comprehensive Security Training
http://www.niiconsulting.com/services/education/Training%20Calendar.html

2009/4/13 <sfmailsbm () gmail com>
> Hi List,
> We all know about sniffing email traffic which is unencrypted (both SMTP traffic and MAPI traffic - MS Exchange 
> Server)
>
> The mail body can be easily accessed from the network dumps, however what about the attachments in the email. is 
> there an *easy* way/tool to reconstruct email attachments from the network dump?
>
> thanks all for ur valuable feedback
>
> Regards,
> Ronish
>
>
>
> ------------------------------------------------------------------------
> This list is sponsored by: InfoSec Institute
>
> Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both Instructor-Led and Online formats is the most 
> concentrated exam prep available. Comprehensive course materials and an expert instructor means you pass the exam. 
> Gain a laser like insight into what is covered on the exam, with zero fluff!
>
> http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
> ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Find the source of cybercrime! Almost every crime today involves a computer or mobile device. Learn how to become a 
Computer Forensics Examiner in InfoSec Institute's hands-on Computer Forensics Course. Up to three industry recognized 
certs available, online computer forensics training available.

http://www.infosecinstitute.com/courses/computer_forensics_training.html
------------------------------------------------------------------------