trufflesecurity/email-graffiti repository overview

⁠EmailGraffiti

Vandalize old emails by taking over images that point to unclaimed resources, kind of like an NFT that's easy to prove ownership of.

Checkout this full blog post to understand what's happening: https://trufflesecurity.com/blog/email-graffiti⁠

⁠How to get started

Start by downloading the email you want to check in mbox format. In Gmail you can do that here⁠

Note: It's super sketchy to run someone's random skript on all your old email, so maybe review the code first ;)

Place your export in your current working directory.

⁠Run the docker container to find email images you can Graffiti over

docker run --rm -it -v $PWD/:/pwd trufflesecurity/email-graffiti pwd/mail.mbox

You should start seeing some images you can take over in your email :)

⁠Now what?

Now that you've got the image and the service, you can go to that service and register the image as your own!

For example, for S3 buckets, here's the name of the bucket:

https://s3-us-west-2.amazonaws.com/**bucketname**/imagename.jpg⁠

Head on over to the AWS console⁠, and register that bucket name:

Then just upload an image into the bucket that has the same name as the image found in your email. That's it!

⁠Animated images

Did you know if Chrome recieves a GIF from the server, it doesn't matter if the extension is .jpeg ? You can name any animated GIF after the png, jpeg or jpg of your choosing. Try it out!