MAPI over HTTP and Mailrule Pwnage

This post demonstrates a practical exploitation technique abusing Exchange MAPI/HTTP and Outlook mail rules to achieve remote code execution (reverse shell) by creating malicious mail rules on a target mailbox. It details protocol analysis, ROP/MAPI structures, autodiscover discovery, a Go-based tool (ruler) to add/delete mail rules, and an optional autodiscover-based brute-force feature to obtain credentials.