sensepost/ruler

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2313 stars · 358 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Ruler is a Go-based command-line tool for interacting with and abusing Microsoft Exchange servers via MAPI/HTTP or RPC/HTTP. It enables offensive operations such as user enumeration, GAL dumping, and remote shell execution through malicious Outlook rules, forms, or home pages.

Use cases

• abuse exchange server to get a remote shell
• enumerate valid exchange user accounts
• dump the global address list from exchange
• execute vbscript through outlook forms
• create malicious mail rules for persistence
• brute force exchange user credentials
• pass the hash against exchange mapi

When to choose

• you are doing authorized penetration testing or red team engagements against Exchange environments
• you need to demonstrate Outlook client-side attack vectors like rules, forms, or homepage persistence
• you want a Go tool with cross-platform binaries for MAPI interaction

When to avoid

• you need a defensive or auditing tool rather than an offensive one
• your target is not Microsoft Exchange or Outlook
• you require a permissively licensed tool - it is licensed CC BY-NC-SA (non-commercial)
• you need actively developed features - the project is largely in maintenance mode

Facets

cli-tool · maturity maintenance

penetration-testing security email http-client penetration-testing security email windows cli go exchange mapi outlook red-team offensive-security pentesting linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="sensepost/ruler")