User Controls
The Outlook Could Be Bleak
-
2016-01-22 at 4:53 PM UTCI work for a company.
Everybody uses outlook (like most companies)
I know there email addresses (Of course)
Just not there passwords.
Any ideas on how I can obtain without there knowledge.
I have tried : http://www.nirsoft.net/utils/mailpv.html
But it comes up blank when I open it. -
2016-01-22 at 5:24 PM UTC
I work for a company.
Everybody uses outlook (like most companies)
I know there email addresses (Of course)
Just not there passwords.
Any ideas on how I can obtain without there knowledge.
I have tried : http://www.nirsoft.net/utils/mailpv.html
But it comes up blank when I open it.
Do you mean the outlook desktop application or the outlook web application? How do you reset your password if you forget it? Does someone do it for you or do you do it yourself by answering some questions? I'd venture a guess that this will be easier to do in a non-technical manner ie. phishing, social engineering etc. -
2016-01-22 at 10:08 PM UTCA hardware key logger could work as well. Do you need a lot of their passwords or just one?
-
2016-01-22 at 11:19 PM UTCOne trick is that many people who have an @outlook account usually also have a @hotmail account. @hotmail accounts expire and are released back into the wild after 90 days of non-use. So if the @outlook account is [EMAIL="johnnyoobleck@outlook.com"]johnnyoobleck@outlook.com[/EMAIL], there's a probable chance there is also a [EMAIL="johnnyoobleck@hotmail.com"]johnnyoobleck@hotmail.com[/EMAIL], and if there is, there's a chance it expired and can be freely re-registered. Once the @hotmail account is re-registered, there's a good chance it was used as a backup recovery e-mail account for the @outlook account, and can be used to reset the password on the @outlook account. It's actually more efficient to see if the hotmail account is available first, before re-registering it, and if it is, try using it with the Outlook password reset process. If Outlook recognizes the available hotmail account as a valid recovery e-mail on file, it will send a recovery e-mail to it successfully (even though it no longer exists), and if it is not a valid outlook recovery e-mail address, it will say so (not smart!).
[edit]
This also works with GMail and several other e-mail major providers, such as Yahoo. -
2016-01-23 at 1:44 AM UTCIs there by any chance a list of email providers and the time frame before the account expires?
OP: What is the network like at your place of employment? Wireless, wired? Intranet? I don't know to much, but we can at least get it going.
Also, I thought you were in prison or something. Also, their* -
2016-01-23 at 3:12 AM UTC
Is there by any chance a list of email providers and the time frame before the account expires?…
It varies, and they keep changing the length of time. And just because they publicize a certain length of time doesn't mean that will be correct. The only way to know for sure is just try to register it, and then the system tells you if it's in use or not.
Rough estimates:
AOL = deactivated and deleted after 90 days of activity
Hotmail/Outlook/MSN = deactivated and deleted after 90 days of inactivity or not using it within 10 days of account creation
Yahoo = deactivated and deleted after six months of inactivity, plus an additional two months for each year you held the account
BT Yahoo! Mail = deactivated after 150 days of inactivity
GMail = deactivated and deleted after 9 months of inactivity
Note:
expired domain names can also be recovered and used to mount an e-mail server on to create the desired recovery e-mail account required elsewhere -
2016-01-23 at 10:21 PM UTCNah nah all the email addresses are generic so for example [email]j.bloggs@microsoft.com[/email], If person A is on holiday someone needs to read there emails, i can read 2 peoples and they can read mine ( we buddy up) I just log in using there generic email address and the password they give me, but they created.
I just want a way of finding others.... -
2016-01-24 at 10:12 AM UTCHardware key logger for someone of your caliber, unless you took my advice and started learning about computers.
-
2016-01-24 at 5:46 PM UTC
Hardware key logger for someone of your caliber, unless you took my advice and started learning about computers.
Kek. -
2016-01-24 at 10:27 PM UTC
Hardware key logger for someone of your caliber, unless you took my advice and started learning about computers.
Nah it would get picked up and these ppl are based in other offices in the country
Have you seen this before though? http://www.nirsoft.net/utils/mailpv.html
According to the details this should be what i want, but it comes up blank
-
2016-01-24 at 10:59 PM UTCMake a fake company hardware upgrade and give out thousands of keyboards with little radio transmitters in them that bounce the data off routers back to you like the NSA does
-
2016-01-24 at 11:29 PM UTC
One trick is that many people who have an @outlook account usually also have a @hotmail account. @hotmail accounts expire and are released back into the wild after 90 days of non-use. So if the @outlook account is [EMAIL="johnnyoobleck@outlook.com"]johnnyoobleck@outlook.com[/EMAIL], there's a probable chance there is also a [EMAIL="johnnyoobleck@hotmail.com"]johnnyoobleck@hotmail.com[/EMAIL], and if there is, there's a chance it expired and can be freely re-registered. Once the @hotmail account is re-registered, there's a good chance it was used as a backup recovery e-mail account for the @outlook account, and can be used to reset the password on the @outlook account. It's actually more efficient to see if the hotmail account is available first, before re-registering it, and if it is, try using it with the Outlook password reset process. If Outlook recognizes the available hotmail account as a valid recovery e-mail on file, it will send a recovery e-mail to it successfully (even though it no longer exists), and if it is not a valid outlook recovery e-mail address, it will say so (not smart!).
[edit]
This also works with GMail and several other e-mail major providers, such as Yahoo.
I've had the same hotmail address since fucking... 2003 or something, m8. I never use it. What qualifies as "non-use"? Because it has never been "released back into the wild". -
2016-01-25 at 1:14 AM UTC
Nah it would get picked up and these ppl are based in other offices in the country
Have you seen this before though? http://www.nirsoft.net/utils/mailpv.html
According to the details this should be what i want, but it comes up blank
I have not. For something like that though, I think phishing would be your best bet. You could try a brute force or password recovery like Spec mentioned. There's always malware as well(software key logger via trojan). -
2016-01-25 at 4:50 AM UTC
…Because it has never been "released back into the wild".
Hotmail accounts get released back the fastest out of all of them. If you use it rarely, but still within 90 days, it won't get released. You'd have to not log into it at all for 90 days for it be available again for registration.
