From f0cba27bf00df754dd0e091708d6c3c10dacd53a Mon Sep 17 00:00:00 2001 From: Meitar M Date: Tue, 31 Jul 2018 16:57:03 -0400 Subject: [PATCH] Add Ruler, a tool to abuse client-side Outlook features to pwn Exchange. --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 272ebe5..322d887 100644 --- a/README.md +++ b/README.md @@ -355,6 +355,7 @@ Your contributions and suggestions are heartily♥ welcome. (✿◕‿◕). Plea * [DeathStar](https://github.com/byt3bl33d3r/DeathStar) - Python script that uses Empire's RESTful API to automate gaining Domain Admin rights in Active Directory environments. * [RID_ENUM](https://github.com/trustedsec/ridenum) - Python script that can enumerate all users from a Windows Domain Controller and crack those user's passwords using brute-force. * [MailSniper](https://github.com/dafthack/MailSniper) - Modular tool for searching through email in a Microsoft Exchange environment, gathering the Global Address List from Outlook Web Access (OWA) and Exchange Web Services (EWS), and more. +* [Ruler](https://github.com/sensepost/ruler) - Abuses client-side Outlook features to gain a remote shell on a Microsoft Exchange server. ### GNU/Linux Utilities