intidc / clintool Goto Github PK

Clintool - by Inti De Ceukelaire (@securinti)

ABOUT

The Clintool does not prevent e-mails from being leaked, but once they have been leaked, it can determine which recipient leaked the information, if the e-mail was sent through Gmail with the Clintool enabled.

It works by sending slightly different e-mails to all recipients which will look exactly the same, but secretly contain their e-mail address. Whenever they leak the information, they will also leak their e-mail address. This tool was built with marypoppit.com and gmail.js.

Even though this tool was tested thoroughly, it provides no guarantuee. The Clintool does not store any private information and does leak any information from your e-mail account. This tool is entirely open source and can be found at Github (github.com/intidc/clintool)

HOW TO USE

1. Install the plugin in the Chrome store
2. Go to gmail.com
3. Click "compose"
4. Next to the blue send button, a 2nd red button should appear
5. If you click this button, the e-mail sent to your recipients will contain hidden watermarks with their e-mail address
6. To decode a leaked mail sent with this tool, go to marypoppit.com or click the extension popup icon in the right corner of your screen. Then click on 'decoder' and enter as much as possible from the leaked e-mail

SETTINGS

In the popup window, you can either choose to insert an invisible watermark after X amount of characters, or choose the total amount of characters it should contain. If the chosen value is too high for a single watermark, the script will slightly adapt the value to make sure at least one watermark is included

CONTACT inti.de.ceukelaire [at] gmail (dot) com