Introducing MailSniper: A Tool For Searching Every User’s Email for Sensitive Data

MailSniper is a PowerShell tool that leverages Exchange Web Services and Exchange management capabilities to search individual or all mailboxes for sensitive terms (e.g., passwords, credentials, SCADA). The post documents Invoke-SelfSearch for searching the current user’s mailbox and Invoke-GlobalMailSearch for domain-wide searches—describing required privileges (Exchange Organization Administrators/ApplicationImpersonation), command examples, configurable options (terms, mails-per-user, Exchange version), output to CSV, and discusses both pentesting value and potential misuse for privilege escalation and data discovery.