NotRuler is a tool that allows Exchange Admins to remotely interact with Exchange servers to detect client-side Outlook rules and VBScript enabled forms, aiding in the detection of attacks created through Ruler. It provides the ability to query Exchange mailboxes, check for compromise, extract stager addresses for malicious rules, extract VBScript used in forms, and check for 'homepage' and extract URLs. The tool has compiled binaries for Linux, OSX, and Windows, with information on setting up from source available in the getting-started guide. NotRuler operates in two modes: Rules to check for client-side rules, Forms to check for VBScript enabled forms, and Homepage to check for a custom homepage.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A command line steganography tool that uses LSB technique to hide files within images without visible alteration.
A platform for creating and managing fake phishing campaigns to raise awareness and train users to identify suspicious emails.
Comprehensive manual for mobile app security testing and reverse engineering with technical processes for verifying controls.
An open-source phishing toolkit for businesses and penetration testers.
Extract local data storage of an Android application in one click.
An Active Defense framework for detecting and responding to phishing attacks in Office 365 Message Trace logs.
A Graphical Realism Framework for Industrial Control Simulation organized as 5 VirtualBox VMs for realistic ICS network simulation.
Python tool for monitoring user-select APIs in Android apps using Frida.
A comprehensive collection of wordlists for bruteforcing and password cracking, covering various hashing algorithms and sizes.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.