ruler

Введение Ruler — это инструмент, позволяющий удаленно взаимодействовать с серверами Exchange через протоколы MAPI/HTTP или RPC/HTTP. Основная цель — злоупотребить клиентскими функциями Outlook и получить удаленную оболочку. Полное описание того, как был реализован Ruler, и некоторые сведения о MA...

ruler

Introduction Ruler is a tool that allows you to interact with Exchange servers remotely, through either the MAPI/HTTP or RPC/HTTP protocol. The main aim is abuse the client-side Outlook features and gain a shell remotely. The full low-down on how Ruler was implemented and some background regardin...

Description of the security update for Outlook 2013: October 10, 2017

Description of the security update for Outlook 2013: October 10, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Description of the security update for Outlook 2016: October 10, 2017

None None...

Microsoft Exchange Service Abuse: Ruler

Microsoft Exchange Service Abuse Ruler is a tool that allows you to interact with Exchange servers through the MAPI/HTTP protocol. The main aim is abuse the client-side Outlook mail rules. “ Silentbreak did a great job with this attack and it has served us well. The only downside has been that it...