# 143

Using the credential from port \[\[8000(or)443]] We can list mailboxes:

```
curl -k 'imap://192.168.219.140/' --user jonas:SicMundusCreatusEst
```

![](https://2519178678-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuE2sPgM0QY6KfiTIG8Vs%2Fuploads%2Fgit-blob-a2afc024c220b449b1a53c0ca031b0a38ef26919%2F4547792ed4268bf213614a084697dcb7.png?alt=media)

Then to check the message indices:

```
curl -k 'imap://192.168.219.140/INBOX?ALL' --user jonas:SicMundusCreatusEst
```

![](https://2519178678-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuE2sPgM0QY6KfiTIG8Vs%2Fuploads%2Fgit-blob-f98c1f1753b3ee4520b894bfc89e3220c7a71ee4%2Fc35502af401dae52aa44990384a21f99.png?alt=media)

Now we can write a small bash script to retrieve all the mails: ![](https://2519178678-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuE2sPgM0QY6KfiTIG8Vs%2Fuploads%2Fgit-blob-431cfe9861f5e8a67a51d80a3167038da00bfc23%2F355687aed3f6167d4c9ab97085200fc0.png?alt=media) We can run this to retrieve all the mails:

```
./showmails.sh > allmails.txt
```

![](https://2519178678-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuE2sPgM0QY6KfiTIG8Vs%2Fuploads%2Fgit-blob-a2baa8e92bcefa7f0a851c9da22fdb8bc6528d7f%2F55e26f03ba0a820a43a1a345c10f3a8c.png?alt=media)

Now we can send the infected .odt file through \[\[PG Practice/Hepet/25]]
