NotRuler is a tool that allows Exchange Admins to remotely interact with Exchange servers to detect client-side Outlook rules and VBScript enabled forms, aiding in the detection of attacks created through Ruler. It provides the ability to query Exchange mailboxes, check for compromise, extract stager addresses for malicious rules, extract VBScript used in forms, and check for 'homepage' and extract URLs. The tool has compiled binaries for Linux, OSX, and Windows, with information on setting up from source available in the getting-started guide. NotRuler operates in two modes: Rules to check for client-side rules, Forms to check for VBScript enabled forms, and Homepage to check for a custom homepage.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A search engine for the Internet of Things (IoT) that discovers and monitors devices connected to the internet.
PLCinject is a tool for injecting and patching blocks on PLCs with a call instruction.
Python tool for monitoring user-select APIs in Android apps using Frida.
Extract local data storage of an Android application in one click.
Web-based tool for browsing mobile applications sandbox and previewing SQLite databases.
An industrial control system testing tool that enables security researchers to enumerate SCADA controllers, read register values, and modify register data across different testing modes.
Hashcat is a fast and advanced password recovery utility that supports various attack modes and hashing algorithms, and is open-source and community-driven.
An Active Defense framework for detecting and responding to phishing attacks in Office 365 Message Trace logs.
A tool for extracting static and dynamic features from Android APKs.