Re: [PEN-TEST] examining exchange mail

[Ryan Russell <ryan () SECURITYFOCUS COM>]

On Wed, 6 Dec 2000, Andrew Thomas wrote:

> I have domain admin on a network, and I want to know how I would go about
> viewing mail *stored* on the Exchange Server, if this is possible.

Run Outlook, and Go to File->Open->Other User's Folders.  It's possible
that you might need the password & account that Exchange runs under, which
you should be able to get and crack if you've got Admin.

I've only been able to get to people's Inbox this way, but I'm probably
just doing something stupid that prevents me from getting to their other
folders.

The actual mail is all stored in one monolithic file on the Exchange
server, in some sort of DB format.

                                        Ryan