Title: An OutLook Information Collection Tool

0x01 Introduction

This is a burp plug-in for collection of Outlook user information. You can use this after you have logged into your Outlook account.

The plug-in automatically crawls all contact information

0x02 Installation

Just load the jar in the burp extension panel

0x03  Function introduction

1.All Users

After loading the plug-in, enter the Outlook contact panel and click All Users

Proxy - HTTP history filter api interface in burp

/owa/service.svc?action=FindPeopleapp=People

Select the request and right-click the menu Extensions - OutLook information collection - Do OoutLook Email scan

Scan progress will be displayed in Extender - Extensions - OutLook information collection - Output

The plug-in will automatically crawl all packets and generate a directory tree, which can view each request response package.

Right-clicking the request will bring up the right-click menu and select Get all user emails to get all emails.

2. Note

This API will have a large number of the same URLs and different Post submission parameters. If you select the wrong API interface, there will be a pop-up prompt.

3.Contact Information

All packets of All Users must be loaded to use normally. The contact information is based on the All Users packet information. If the first step is not performed, there will be a pop-up reminder.

Proxy - HTTP history filter api interface in burp

/owa/service.svc?action=GetPersonaapp=People

Select the request and right-click the menu Extensions - OutLook information collection - Do OoutLook Email scan

Scan progress will be displayed in Extender - Extensions - OutLook information collection - Output

The plug-in will automatically crawl all packets and generate a directory tree, which can view each request response package.

Right-clicking the request will bring up the right-click menu and select Get All User personal information to obtain all contact information.

Tools to obtain: Official account reply keyword "OutLook"