Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages


home | help
ripMIME(1)			 MIME decoders			    ripMIME(1)

       ripMIME - email attachment / decomposition tool.

       ripMIME -i <mime	file> -d <directory>
       [-p prefix][-e [headerfile]]
       [--disable-qmail-bounce][--recursion-max	<level>]

       ripMIME	is  a command line tool	used to	aid in the extraction of email
       borne attachments to files which	can  be	 processed  using  other  UNIX
       tools.	ripMIME	 supports both the RFC MIME standards as well as being
       able to behave according	to various MUA 'features' which	are often used
       as exploitation holes.

       -i     Input MIME encoded file (use '-' to input	from STDIN)

       -d     Output directory

       -p     Specify  prefix  filename	to be used on files without a filename
	      (default 'text')

       -e [headers file	name]
	      Dump headers from	mailpack (default '_headers_')

       -v     Turn on verbosity

       -q     Run quietly, do not report non-fatal errors

	      Turn on verbosity	of file	content	type

	      Uses the v1.2.x style or filename	reporting

	      Report MIME header/body defects located in the mailpack

	      All reporting goes to stdout (Default)

	      All reporting goes to stderr

	      All reporting goes to syslog

	      [	Deprecated ] Turns off strict ascii-alnum filenaming

	      Converts all filenames to	strict 7-bit compliance

	      Saves a given attachment by its content-type if it has no	 other

	      Do not save nameless attachments

	      Overwrite	files if they have the same name on extraction

	      Dont overwrite existing files (This is the default behaviour)

	      rename by	putting	unique code at the front of the	filename

	      rename by	putting	unique code at the end of the filename

	      rename by	putting	unique code in the middle of the filename

       --recursion-max <maximum	level>
	      Set  the	maximum	recursion level	into a mailpack.  Often	emails
	      are forwarded copies of an existing email,  each	time  this  is
	      done a new recursion level is required.  Malicious emails	can be
	      constructed with many hundereds of recursion  levels  to	induce
	      stack faults in decoding programs.  ripMIME is hard coded	with a
	      default of 20 levels, this may be	overidden using	 this  parame-

	      Process mailbox file

	      Returns error codes for non-fatal	decoding situations

	      Produces detailed	information about the whole decoding process

   Attachment type decoding switches
	      Turn off TNEF/winmail.dat	decoding

	      Turn off OLE decoding

	      Turns  off  the  facility	 of detecting UUencoded	attachments in

	      Turns off	the facility of	decoding QuotedPrintable data

	      Turns off	saving of double-CR embedded data

	      Turns off	MHT (a Microsoft mailpack attachment format ) decoding

	      Turns off	ripMIME's  look-ahead  searching  for  RFC822  headers
	      within a body of text. Normally the look-ahead is	useful for de-
	      coding embedded emails which have	been bounced back  by  systems
	      like  qmail,  but	have been included in such a way that they are
	      not meant	to be decoded, unfortunately  some  MUA	 (Outlook  for
	      one)  still decode it, hence we need to by default check for at-
	      tachments	in such	forwarded bodies.

	      Turns off	the behaviour of handling multiple filename occurances
	      in  a  single MIME header. Normally ripMIME will generate	a hard
	      link for each additional filename	beyond the original attachment
	      filename detected.

   Auxillary parameters
	      Displays	the  information  obtained by the Makefile script when
	      ripMIME was built.  This	includes  the  Unix  timestamp,	 human
	      readable	version	 of  the  timestamp and	the output from	'uname

       -V --version
	      Give version information

       -h     Terse information	on how to use ripMIME.



       To unpack an email in a file 'mailpack' to the directory	/tmp with ver-
       bose output of the files	unpacked;

       ripmime -i mailpack -v -d /tmp

       Paul L Daniels
       ripMIME WWW site
       ripMIME mailing list <>
       For mailpacks which do not appear to decode correctly - please email to

       altermime(1), inflex(1),	ripole(1), opentnef(1)

Paul L Daniels			    ripMIME(1)


Want to link to this manual page? Use this URL:

home | help