ruler

소개 Ruler는 MAPI/HTTP 또는 RPC/HTTP 프로토콜을 통해 원격으로 Exchange 서버와 상호 작용할 수 있는 도구입니다. 주요 목표는 클라이언트 측 Outlook 기능을 악용하여 원격에서 셸을 획득하는 것입니다. Ruler가 어떻게 구현되었는지, 그리고 MAPI에 대한 배경 정보에 대한 자세한 내용은 블로그 게시물에서 확인할 수 있습니다: Ruler 릴리스 Ruler로 Pass the Hash Outlook 양식 및 셸 Outlook 홈 페이지 – 또 다른 Ruler 벡터 작동 데모: YouTube의 Rule...

ruler

Introduction Ruler is a tool that allows you to interact with Exchange servers remotely, through either the MAPI/HTTP or RPC/HTTP protocol. The main aim is abuse the client-side Outlook features and gain a shell remotely. The full low-down on how Ruler was implemented and some background regardin...

CVE-2023-23397-Report

CVE-2023-23397-Report Outlook 권한 상승 취약점의 악용 데모 CVE-2023-23397은 Microsoft Outlook의 중요한 EoP권한 상승 취약점으로, 공격자가 신뢰할 수 없는 네트워크에 있는 공격자 제어 서버의 SMBTCP 445 공유에 대한 UNC 경로가 포함된 확장 MAPI 속성이 있는 메시지를 보낼 때 트리거됩니다. 사용자 상호 작용이 필요하지 않습니다. 공격자는 원격 SMB 서버에 대한 연결을 사용하여 사용자의 NTLM 협상 메시지를 전송하며, 공격자는 이 메시지를 릴레이하여 NTLM 인...

CVE-2023-23397

CVE-2023-23397 脆弱性の詳細 🚨💻 Microsoftは最近、このゼロデイエクスプロイトであるCVE-2023-23397を含む一連の重大なセキュリティ脆弱性に対処しました。Common Vulnerability Scoring System CVSS はこのエクスプロイトに9.8のスコアを割り当てました。 CVE-2023-23397: Microsoft Outlook における特権の昇格 📧🔓 Microsoft Outlook に重大な特権の昇格 EoP 脆弱性が確認されました。この欠陥は、攻撃者が悪意のあるメッセージ内のユニバーサルネーミング規則 UNC...

CVE-2026-26930

SmarterTools SmarterMail before 9526 allows XSS via MAPI requests...

CVE-2026-26930

SmarterTools SmarterMail before 9526 allows XSS via MAPI requests...

MiracleLinux 8 : evolution-mapi-3.28.3-7.el8, openchange-2.3-31.el8 (AXSA:2023-6022:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6022:03 advisory. samba: GnuTLS gnutlsrnd can fail and give predictable random values CVE-2022-1615 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : bogofilter-1.2.5-2.el8, evolution-data-server-3.28.5-14.el8, evolution-mapi-3.28.3-3.el8, evolution-3.28.5-14.el8, openchange-2.3-26.el8 (AXSA:2021-1388:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1388:01 advisory. evolution-data-server: Response injection via STARTTLS in SMTP and POP3 CVE-2020-14928 Tenable has extracted the preceding description block directly from th...

EUVD-2012-4272

Malware in sbrugna...

Citrix Provisioning - SoapService errors in the event viewer after installing 2042 CU2

Since installing 2402 CU2 there are multiple errors in the event viewer. The event logged during Citrix PVS Soap Server start: Source: SoapService Event ID: 1 Level: Error Event Data:MapiException: ErrorCodeOtherException An unexpected MAPI error occurred. The event logged every 5 minutes: Source...

Exploit for Improper Input Validation in Microsoft

CVE-2023-23397 Exploitation & Mitigation Demo 📌 Overview...

evolution-mapi, openchange, and samba bug fix and enhancement update

An update is available for openchange, evolution-mapi, samba. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release...

IPC Error when Exporting the vDisk on Provisioning Services

IPC Error when exporting vDisk on Provisioning Services PVS. PVS Console log includes thefollowing errors: ERROR EnterpriseAccess.HandlerBase - PvsStatusExceptionHandlerERROR EnterpriseAccess.HandlerBase - return code: 184ERROR EnterpriseAccess.HandlerBase - exception type: PvsStatusExceptionERRO...

error when importing new vdisk AN unexpected MAPI Error Occured

When trying to import vdisks into the PVS console, you may received an error. This occurs when it should be populating the list of disks available to import. The message is "An unexpected MAPI error occurred. Details: Index was outside the bounds of the array"...

Exploit for Improper Input Validation in Microsoft

CVE-2023-23397 Vulnerability Details 🚨💻 Microsoft has recent...

samba security, bug fix, and enhancement update

evolution-mapi 3.40.1-5 - Related: 2131993 Rebuild against samba 4.17 openchange 2.3-40 - Related: 2131993 Rebuild against samba 4.17 samba 4.17.5-102.0.1 - Fix memleak in nsswinbindinitgroupsdyn Orabug: 34994509 4.17.5-102 - resolves: rhbz2169980 - Fix winbind memory leak - resolves: rhbz2156056...

Malicious code in mapi-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c898d0a405d3dbdd1d8f7534d31152e30eb107a587e3b71d6ebb46116d22746 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-581 Malicious code in mapi-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c898d0a405d3dbdd1d8f7534d31152e30eb107a587e3b71d6ebb46116d22746 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Guidance for investigating attacks using CVE-2023-23397

This guide provides steps organizations can take to assess whether users have been targeted or compromised by threat actors exploiting CVE-2023-23397. A successful exploit of this vulnerability can result in unauthorized access to an organization’s environment by triggering a Net-NTLMv2 hash leak...

SUSE CVE-2017-6307

An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapiattr.c:mapiattrread. These might lead to invalid read and write operations, controlled by an attacker...