You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+14Lines changed: 14 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -348,6 +348,18 @@ Deleting an existing is done in a similar way to deleting rules.
348
348
./ruler --email john@msf.com form delete --suffix superduper
349
349
```
350
350
351
+
### Trigger Form with a Rule
352
+
353
+
Nick Landers ([@monoxgas]) found that a form without event triggers, would call the VBScript payload on delete. This delete can be automated by creating a client-side rule to delete the message as it arrives in the mailbox.
354
+
355
+
This is a great way to auto-trigger the form, without requiring any user interaction. Ruler can automate this for you if you supply the ```--rule``` flag:
You will need to delete the newly created rule once your payload has triggered. This can be done using the delete command outlined [above].
362
+
351
363
# Attacking Exchange
352
364
353
365
The library included with Ruler allows for the creation of custom message using MAPI. This along with the Exchnage documentation is a great starting point for new research. For an example of using this library in another project, see [SensePost Liniaal].
@@ -359,3 +371,5 @@ The library included with Ruler allows for the creation of custom message using
359
371
[Ruler on YouTube]:<https://www.youtube.com/watch?v=C07GS4M8BZk>
0 commit comments