-{ a hewer of maps }-

Extract Invisible Attachment

I periodically get email from ios users with invisible attachments.

TLDR: view raw, save base-64 to text, uudecode using certutil --decode (a native tool in Win7+)

Last night I finally figured out what is going on: the attachment is marked as "inline" in the header, but the client (gmail in this case, but can happen with others too) doesn't render the attachment correctly. However since the media is inline it's not visible/extractable like regular attachments are.

Symptoms

The fix

Sources
The 1st modern Cahill-Keyes Map, maybe »