[equi_gonzales13]

Hello there. I know that many of you will be quite unwilling in helping a new member out, so i hope that my question will, at least, be perceived as a kind of.. "challenge" to your hacking knowledge 😝

To the point..

I am an employee of a company with a LAN Network established. Each user has some credentials that uses in order to log into his personal profile, and subsequently, to his network storage server in which an outlook data file is stored (in a .pst form).

The thing now is that i am having some problems with a colleague of mine who constantly tries to -kind of- sabotage my work, and unfortunately happens to be very.. ehmm.. "friendly" to our supervisor, so any resolution of this matter in an honest and fair way is excluded.

So my question is: Could it possibly be any way to access the above mentioned storage server and the subsequent outlook data file from my corporate computer? Note that any application is blocked automatically from being installed.

And secondly, provided that in some way i find his login credentials, if i login from a random corporate computer at non-working hours, would that be visible to the IT Department the next day?

I can assure you that i will not and i don't want to use the info in a malicious way, i was just hoping that by accessing his messages i could find out more and protect myself better in the future.

Sorry for the long post..

[pop_shell]

Talk to the sys admin then? Problem solved. He/She can fix the file and folder level security and permissions

[Armada]

Hello there. I know that many of you will be quite unwilling in helping a new member out, so i hope that my question will, at least, be perceived as a kind of.. "challenge" to your hacking knowledge 😝

To the point..

I am an employee of a company with a LAN Network established. Each user has some credentials that uses in order to log into his personal profile, and subsequently, to his network storage server in which an outlook data file is stored (in a .pst form).

The thing now is that i am having some problems with a colleague of mine who constantly tries to -kind of- sabotage my work, and unfortunately happens to be very.. ehmm.. "friendly" to our supervisor, so any resolution of this matter in an honest and fair way is excluded.

So my question is: Could it possibly be any way to access the above mentioned storage server and the subsequent outlook data file from my corporate computer? Note that any application is blocked automatically from being installed.

And secondly, provided that in some way i find his login credentials, if i login from a random corporate computer at non-working hours, would that be visible to the IT Department the next day?

I can assure you that i will not and i don't want to use the info in a malicious way, i was just hoping that by accessing his messages i could find out more and protect myself better in the future.

Sorry for the long post..

Well damn, your company runs a LAN, go figure. ❓
Guess they upgraded from that Token ring topology. from the 70's.


Ok, enough sarcasm, heres the real deal.

So my question is: Could it possibly be any way to access the above mentioned storage server and the subsequent outlook data file from my corporate computer? Note that any application is blocked automatically from being installed.

Yes its possible, and chances are if its an internal server, its less likely to be fully patched than one that is internet visible.
- So yes, possible., but not recommended because if you are ASKING this chances are you do not have the skill set to properly pen test without detection.

And secondly, provided that in some way i find his login credentials, if i login from a random corporate computer at non-working hours, would that be visible to the IT Department the next day?

Depends on the IT departments security policy, my general guess would be yes however. Windows based networks log login attempts by default, rarely do we admins turn this setting off.

Thus if they do audit the records it can and will be seen so and so logged in this terminal at this specific time.

My recommendation would be to not go directly for his Outlook file but his login account access, after you have that you could in THEORY do anything under their name. But this is theory only of course. 🤫
Whistles and walks away

[equi_gonzales13]

My recommendation would be to not go directly for his Outlook file but his login account access, after you have that you could in THEORY do anything under their name. But this is theory only of course. 🤫

Thank you very much for your answer and for waisting your precious time 🤝

One last thing only, IF you can share it of course, and IF i am not getting too annoying. So, i was wondering, THEORITICALLY ALWAYS 🤫, what could someone do with the login user and pass since, as you said very accurately, all the login attempts are monitored?