ruler

简介 Ruler 是一款工具，允许你通过 MAPI/HTTP 或 RPC/HTTP 协议远程与 Exchange 服务器交互。其主要目标是滥用 Outlook 客户端侧的特性，远程获取一个 Shell。 关于 Ruler 的实现细节以及 MAPI 的背景信息，可以在我们的博客文章中找到： Ruler 发布 使用 Ruler 进行哈希传递 Outlook 表单与 Shell Outlook 主页——另一个 Ruler 攻击向量 查看实际演示： YouTube 上的 Ruler 它能做什么？ Ruler 拥有多项功能，未来还计划添加更多功能。这些功能包括： 枚举有效用户 创建新的恶意邮件规则...

ruler

Introduction Ruler is a tool that allows you to interact with Exchange servers remotely, through either the MAPI/HTTP or RPC/HTTP protocol. The main aim is abuse the client-side Outlook features and gain a shell remotely. The full low-down on how Ruler was implemented and some background regardin...

Description of the security update for Outlook 2016: October 10, 2017

None None...

Description of the security update for Outlook 2013: October 10, 2017

Description of the security update for Outlook 2013: October 10, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Microsoft Exchange Service Abuse: Ruler

Microsoft Exchange Service Abuse Ruler is a tool that allows you to interact with Exchange servers through the MAPI/HTTP protocol. The main aim is abuse the client-side Outlook mail rules. “ Silentbreak did a great job with this attack and it has served us well. The only downside has been that it...