How can I read the full content of an email and download its attachments via the OWA command-line interface?
Use the `GetConversationItems` action by sending a POST to `/owa/service.svc?action=GetConversationItems` with the `ConversationId` obtained from the listing step. The JSON response includes the email body, metadata, and attachment details (Id and ContentType). For downloading attachments, you will need to make subsequent requests (not detailed in this snippet) using the attachment IDs. This command‑line implementation is analogous to other remote execution techniques described in Domain Penetration - Remote Execution via Scheduled Tasks in GPO and Penetration Basics - Implementation of Webshell Supporting NTLM Over HTTP Protocol, all of which rely on crafting HTTP requests with proper session management.
GetConversationItemsemail contentattachmentsdownloadOWA APIsession management