• Stars
    star
    140
  • Rank 260,340 (Top 6 %)
  • Language
    C#
  • Created about 4 years ago
  • Updated over 3 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Tool for interacting with outlook interop during red team engagements

Carbuncle

Tool for interacting with outlook interop during red team engagements.

Usage

Carbuncle Usage:
carbuncle.exe <action> <action arguments>

Actions:
	searchmail		Search for an e-mail in the users inbox
	attachments		Search for and download attachments
	read			Read a specific e-mail item
	send			Send an e-mail
	monitor			Monitor for new e-mail items

read:
	/entryid:		Read an e-mail by its specific unique ID
					carbuncle.exe read /entryid:00000000ABF08F38F774EF44BD800D54DA6135740700438C90E5F1E27549A26DD4C4CE7C884C0069B971A0EB00007E3487BFEF2F834F93D188D339E4EA4E00003BA5A49B0000
	
	/number:		Readn an e-mail by its numerical position in the inbox.
					carbuncle.exe read /number:3
					
	/subject		Read an e-mail by its subject
					carbuncle.exe read /subject:"Password Reset 05/20/2021"
					
	
searchmail:
	/body			Search by the content of the body. Supported search methods: /regex and /content
					carbuncle.exe searchmail /body /content:"Password" [/display]
					
	/senderaddress	Search by sender address. Supported search methods: /regex and /address
					carbuncle.exe searchmail /senderaddress:"[email protected]" [/display]
					
	/subject		Search by e-mail subject. Supported search methods: /regex and /content
					carbuncle.exe searchmail /subject /regex:"(checky).+" [/display]
	
	/attachment		Search by e-mail attachment. Supported serach methods: /regex and /name
					carbuncle.exe searchmail /regex:"(id_rsa).+" /downloadpath:"C:\\temp\\" [/display]
	
	/all			Gets all e-mails
					carbuncle.exe /all [/display]
	
	Optional Flags:
	/display 		Display the body of any matched e-mail.
	/downloadpath	Download any matching attachments to the specified location

monitor:
	Optional:
	/regex			Can specify a regex to only notify on new e-mails that match a specific regex
					carbuncle.exe monitor /regex:(id_rsa) [/display]
	
	/display		Display the e-mails in console as they arrive.
					carbuncle.exe monitor /display
					
attachments
	/all			Downloads all attachments to the specified download folder
					carbuncle.exe attachments /downloadpath:"C:\\temp\\" /all
					
	/entryid		Download attachment from a specified e-mail
					carbuncle.exe attachments /downloadpath:"C\\temp\\" /entryid:00000000ABF08F38F774EF44BD800D54DA6135740700438C90E5F1E27549A26DD4C4CE7C884C0069B971A0EB00007E3487BFEF2F834F93D188D339E4EA4E00003BA5A49B0000
					
					
send
	/subject		Sets the subject of the e-mail
 
	/recipients		A comma separated list of recipients for the e-mail to be sent to

	/body			Body of the e-mail to send.
			
	/attachment		The local file of the attachment to be included in the e-mail

	/attachmentname	(Optional) The name of the attachment. The default is the name of the file without the extension.
					carbuncle.exe send /subject:"test e-mail please ignore" /recipients:"[email protected],[email protected]" /body:"Hello World" /attachment:"C:\\temp\\attachment.exe" /attachmentname:"Totally Legitimate"

More Repositories

1

Zolom

C# Executable with embedded Python that can be used reflectively to run python code on systems without Python installed
C#
240
star
2

Sharp-SMBExec

SMBExec C# module
C#
216
star
3

Sharp-WMIExec

C#
207
star
4

iMessagesBackdoor

A script to help set up an event handler in order to install a persistent backdoor that can be activated by sending a message.
Python
173
star
5

CoreSploit

Initial Commit of Coresploit
C#
55
star
6

sshiva

C# application that allows you to quick run SSH commands against a host or list of hosts
C#
42
star
7

Forerunner

Automation Engine using the Covenant API and lua scripting
C#
24
star
8

TokenContextManipulation

Code that can be used to create/steal/manipulate token contexts in a program. Can be implemented into other C# projects.
C#
14
star
9

MemScan

Quick Proof of Concept for reading a processes memory and searching for a specific string.
C#
10
star
10

PayloadEncrypt

A powershell script that encrypts a payload, creates a stager designed to decrypt and execute the payload on a victim machine
PowerShell
10
star
11

Empire-Modules

Python
3
star
12

SharpConversions

C# conversions of Powershell Scripts that can be embedded as a module into C# RATs or run directly via an executable.
3
star
13

checkymander.github.io

Checkymander's Blog
Ruby
3
star
14

CTF-Scripts

Random (Terribly Coded) Scripts created for use in HackTheBox challenges.
Python
2
star
15

RandomScripts

RandomScripts used for Proof of Concepts or Time saving
Python
2
star
16

AdventOfCode

My Collection of AdventOfCode Challenges
C++
1
star
17

JenkinsFinder

Proof of Concept to identify jenkins servers using UDP Broadcast
C#
1
star