You are viewing a single comment's thread.

view the rest of the comments →

Kazzy ago

if its an email archive i.e podesta emails. unzip and there should be the huge ass file. Its an mbox file and you use https://sourceforge.net/projects/mbox-viewer/ something like this to view the archived emails (afaik all the attachments are within the archive as well)

ThorTheWonderful ago

It looks like HTML code, I could copy a sample here...

From MAILER-DAEMON Sat Nov 5 23:27:03 2016.Delivered-To: [email protected]: by 10.25.24.94 with SMTP id o91csp1126568lfi;. Fri, 3 Apr 2015 07:08:35 -0700 (PDT).X-Received: by 10.107.17.29 with SMTP id z29mr4060098ioi.69.1428070114367;. Fri, 03 Apr 2015 07:08:34 -0700 (PDT).Return-Path: tina@presidentclinton.com.Received: from p01c11o141.mxlogic.net (p01c11o141.mxlogic.net. [208.65.144.64]). by mx.google.com with ESMTPS id iv2si7598020icc.12.2015.04.03.07.08.33. for john.podesta@gmail.com. (version=TLSv1 cipher=RC4-SHA bits=128/128);. Fri, 03 Apr 2015 07:08:34 -0700 (PDT).Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=208.65.144.64;.Authentication-Results: mx.google.com;. spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected]: from unknown [64.74.242.122] (EHLO mail.clintonemail.com)..by p01c11o141.mxlogic.net(mxl_mta-8.2.0-3) over TLS secured channel..with ESMTP id 1ee9e155.0.52803.00-348.144488.p01c11o141.mxlogic.net (envelope-from tina@presidentclinton.com);..Fri, 03 Apr 2015 08:08:34 -0600 (MDT).X-MXL-Hash: 551e9ee254e919d5-671c9295a3c885c6eff514a1e4e2ad511eeb769e.Received: from CESC-EXCH01.clinton.local ([fe80::2de5:d8da:800c:9fc4]) by. CESC-EXCH01.clinton.local ([fe80::2de5:d8da:800c:9fc4%14]) with mapi id. 14.02.0387.000; Fri, 3 Apr 2015 10:06:30 -0400.From: Tina Flournoy Tina@presidentclinton.com.To: John Podesta john.podesta@gmail.com.Subject: just talked to him.Thread-Topic: just talked to him.Thread-Index: AdBuF2Im1352JsfbQq2q1lXzVLBlJg==.Date: Fri, 3 Apr 2015 14:06:30 +0000.Message-ID: A876F159-EB44-4FAA-9111-BF56F35D807C@presidentclinton.com.Accept-Language: en-US.Content-Language: en-US.X-MS-Has-Attach: .X-MS-TNEF-Correlator: .Content-Type: text/plain; charset="us-ascii".Content-ID: 8705E0EFAD0C28489452CD35443C5861@clinton.local.Content-Transfer-Encoding: quoted-printable.MIME-Version: 1.0.X-AnalysisOut: [v=2.1 cv=WZoYaiRX c=1 sm=1 tr=0 a=lWaCaaTd1tIBQFb89xQ1Hg==].X-AnalysisOut: [:117 a=lWaCaaTd1tIBQFb89xQ1Hg==:17 a=BLceEmwcHowA:10 a=kj9].X-AnalysisOut: [zAlcOel0A:10 a=xqWC_Br6kY4A:10 a=kS8a_5sYAAAA:8 a=YtYAUljI].X-AnalysisOut: [AAAA:8 a=YlVTAMxIAAAA:8 a=e9J7MTPGsLIA:10 a=AXDFT7GsNDOEJ3].X-AnalysisOut: [3fwdIA:9 a=CjuIK1q_8ugA:10 a=pen-MEOwqMUA:10 a=rZDnaMM_604].X-AnalysisOut: [A:10 a=Pb4uoIU3A1oA:10].X-Spam: [F=0.5000000000; CM=0.500; MH=0.500(2015040305); S=0.200(2014051901)].X-MAIL-FROM: tina@presidentclinton.com.X-SOURCE-IP: [64.74.242.122].Status: O.Content-Length: 76.Lines: 4....SC was the first thing he mentioned..Told him to talk to you about Greece..From MAILER-DAEMON Sat Nov 5 23:27:03 2016.Delivered-To: [email protected]: by 10.25.88.78 with SMTP id m75csp1439014lfb;. Mon, 22 Feb 2016 15:00:32 -0800 (PST).X-Received: by 10.98.93.2 with SMTP id r2mr41872257pfb.64.1456182032427;.

Kazzy ago

yeah, try opening that file with an mbox viewer https://sourceforge.net/projects/mbox-viewer/

ThorTheWonderful ago

I'm going to add your link to the main post. Thanks

Kazzy ago

no prob

ThorTheWonderful ago

It picked up on the file instantly, its still parsing the file.

Kazzy ago

awesome, I believe any of the email leak archives are .mbox (like the podesta ones or the dnc ones etc.)

ThorTheWonderful ago

Actually I just opened it with a different Hex editor and now it doesn't look like HTML, it looks like a normal email header.