[xfreedom]

Hello,

I've been wondering if someone know how to trigger an email, no matter the subject, to the unknown recovery address attached to an outlook email ?

Do anyone knows how ? I don't have access to the outlook email and of course, I don't know what the recovery adress is.

Thanks in advance

[Dread.Reaper]

Hello,

I've been wondering if someone know how to trigger an email, no matter the subject, to the unknown recovery address attached to an outlook email ?

Do anyone knows how ? I don't have access to the outlook email and of course, I don't know what the recovery adress is.

Thanks in advance

Unknown recovery email attached to the outlook email?
wat....

[xfreedom]

Let me clarify then.
You got an email : [email protected]
This email has been hacked, and recovery was set to a domain email : [email protected]

The problem is, I don't know this recovery email, i know it's r... [email protected], but that's all. I got a catch-all on the domain, so I need to know the recovery email attached to the outlook account so I can recover it.
But outlook need you to provide the email to receive the code, so I wonder if anyone has a technique to do so.

[Dread.Reaper]

Let me clarify then.
You got an email : [email protected]
This email has been hacked, and recovery was set to a domain email : [email protected]

The problem is, I don't know this recovery email, i know it's r... [email protected], but that's all. I got a catch-all on the domain, so I need to know the recovery email attached to the outlook account so I can recover it.
But outlook need you to provide the email to receive the code, so I wonder if anyone has a technique to do so.

Ahhh...
Okay well that would be stored on the emails server (Exchange, etc) So you would need to access that and open the emails profile to find the recovery email address.

[xfreedom]

I bought this domain because I saw it's recovery to this hacked email but it's not a domain from a company.
I might have not understand you but I don't think what you propose is possible.

[AiDenti]

So the account has a recovery email attached? Probably use the web portal and follow the steps.

[xfreedom]

That's the issue.
Steps are ==> forgot your email ==> use recovery email ==> enter recovery email to receive the code. If whats you enter does not match the actual recovery email, no code is sent and recovery is impossible.

[Dread.Reaper]

I bought this domain because I saw it's recovery to this hacked email but it's not a domain from a company.
I might have not understand you but I don't think what you propose is possible.

So you bought the domain that is associated to the recovery email but dont know the exact address itself?

If thats the case, turn on email catch all on the domain to forward to an email address you specify.

[xfreedom]

So you bought the domain that is associated to the recovery email but dont know the exact address itself?

If thats the case, turn on email catch all on the domain to forward to an email address you specify.

I did exactly that, but since I need to input the actual recove ryemail to receive the code, even if I try to guess and input it, they don't send the code to the real ercovery email or a notification saying someone tried to recover the email.

[Dread.Reaper]

I did exactly that, but since I need to input the actual recove ryemail to receive the code, even if I try to guess and input it, they don't send the code to the real ercovery email or a notification saying someone tried to recover the email.

Hmm yea, I see. Yea that is a bit of a problem.

Maybe try DOX and see if you can find the email in logs and breach databases.

[ALEDIO]

Hello,

I've been wondering if someone know how to trigger an email, no matter the subject, to the unknown recovery address attached to an outlook email ?

Do anyone knows how ? I don't have access to the outlook email and of course, I don't know what the recovery adress is.

Thanks in advance

Well this is a rather particular situation, obviously if you need that email unless you have access to Microsoft databases I think it's difficult to obtain, in any case there are 3 things to do in this case. The first is the which you want to have access to the Outlook email, instead of trying to use a recovery email, in theory you could send a unique code that both bypasses two-step verification and the password itself is in which case you'd be in able to gain full and total access to your account. Second possibility, if you have to discover the recovery email at all costs, try doing dox searches on that specific person and locate all the email addresses that he could use and try all of them, it shouldn't be very difficult if you are faced with to an imprudent person on the internet. The third and last possibility concerns that of making a very simple phishing page and obtaining the credentials by deceiving the individual with a social engineering gimmick. Feel free to provide more information about your goal so I can better understand what your ambition is.

[Dread.Reaper]

Well this is a rather particular situation, obviously if you need that email unless you have access to Microsoft databases I think it's difficult to obtain, in any case there are 3 things to do in this case. The first is the which you want to have access to the Outlook email, instead of trying to use a recovery email, in theory you could send a unique code that both bypasses two-step verification and the password itself is in which case you'd be in able to gain full and total access to your account. Second possibility, if you have to discover the recovery email at all costs, try doing dox searches on that specific person and locate all the email addresses that he could use and try all of them, it shouldn't be very difficult if you are faced with to an imprudent person on the internet. The third and last possibility concerns that of making a very simple phishing page and obtaining the credentials by deceiving the individual with a social engineering gimmick. Feel free to provide more information about your goal so I can better understand what your ambition is.

Could have sworn I just said this in a sentence, but sure lol

[xfreedom]

Hmm yea, I see. Yea that is a bit of a problem.

Maybe try DOX and see if you can find the email in logs and breach databases.

I'm not sure I cheked yet but I'm not very hopeful since it was clearly an email set up only for taking over accounts.

Well this is a rather particular situation, obviously if you need that email unless you have access to Microsoft databases I think it's difficult to obtain, in any case there are 3 things to do in this case. The first is the which you want to have access to the Outlook email, instead of trying to use a recovery email, in theory you could send a unique code that both bypasses two-step verification and the password itself is in which case you'd be in able to gain full and total access to your account. Second possibility, if you have to discover the recovery email at all costs, try doing dox searches on that specific person and locate all the email addresses that he could use and try all of them, it shouldn't be very difficult if you are faced with to an imprudent person on the internet. The third and last possibility concerns that of making a very simple phishing page and obtaining the credentials by deceiving the individual with a social engineering gimmick. Feel free to provide more information about your goal so I can better understand what your ambition is.

1. How could I send this code, having no access to the main email or the recovery one ?
2. That would be useless sice the original owner of the account has been hacked, so has no longer access to this email, and the hacker obviously took over the email at some point in time, and no longer uses it. Or else, he probably wouldn't let got of the domain h used for recovery purposes.
3. Same as 2


My goal is simply to gain access to the main email. Phishing or SE are not an option here, and the chances of finding that specific email in databases breaches are very thin, if not inexistant.
The only way in I see is through that recovery email, and I was hoping someone had a technique to trigger an email to that recovery adress, like there was a few years ago, a technique to recreate live.com adresses when microsoft stopped giving that possibility.

[Dread.Reaper]

I'm not sure I cheked yet but I'm not very hopeful since it was clearly an email set up only for taking over accounts.


1. How could I send this code, having no access to the main email or the recovery one ?
2. That would be useless sice the original owner of the account has been hacked, so has no longer access to this email, and the hacker obviously took over the email at some point in time, and no longer uses it. Or else, he probably wouldn't let got of the domain h used for recovery purposes.
3. Same as 2


My goal is simply to gain access to the main email. Phishing or SE are not an option here, and the chances of finding that specific email in databases breaches are very thin, if not inexistant.
The only way in I see is through that recovery email, and I was hoping someone had a technique to trigger an email to that recovery adress, like there was a few years ago, a technique to recreate live.com adresses when microsoft stopped giving that possibility.

Its no help if you dont know the emails full address. You need to sit down and do some research on this target and try and locate that other email of theirs.