├── DotNetPlainTextParser.aspx ├── LICENSE ├── MeetingAlert.png ├── NSAPayload1.xml ├── NSAPayload2.xml ├── PSTEncoder ├── PSTEncoder.c ├── PSTEncoder.vcxproj ├── PSTEncoder.vcxproj.user ├── base64.c ├── base64.h └── x64 │ └── Debug │ └── PSTEncoder.exe ├── README.md ├── exchange2016-ExposedCmdlets-March-2021.txt └── images ├── 1.png ├── 10.png ├── 11.png ├── 12.png ├── 13.png ├── 14.png ├── 15.png ├── 16.png ├── 17.png ├── 18.png ├── 19.png ├── 2.png ├── 3.png ├── 4.png ├── 5.png ├── 6.png ├── 7.png ├── 8.png ├── 9.png ├── MeetingAlert.png └── mitmproxy.png /DotNetPlainTextParser.aspx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/DotNetPlainTextParser.aspx -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/LICENSE -------------------------------------------------------------------------------- /MeetingAlert.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/MeetingAlert.png -------------------------------------------------------------------------------- /NSAPayload1.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/NSAPayload1.xml -------------------------------------------------------------------------------- /NSAPayload2.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/NSAPayload2.xml -------------------------------------------------------------------------------- /PSTEncoder/PSTEncoder.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/PSTEncoder/PSTEncoder.c -------------------------------------------------------------------------------- /PSTEncoder/PSTEncoder.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/PSTEncoder/PSTEncoder.vcxproj -------------------------------------------------------------------------------- /PSTEncoder/PSTEncoder.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/PSTEncoder/PSTEncoder.vcxproj.user -------------------------------------------------------------------------------- /PSTEncoder/base64.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/PSTEncoder/base64.c -------------------------------------------------------------------------------- /PSTEncoder/base64.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/PSTEncoder/base64.h -------------------------------------------------------------------------------- /PSTEncoder/x64/Debug/PSTEncoder.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/PSTEncoder/x64/Debug/PSTEncoder.exe -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/README.md -------------------------------------------------------------------------------- /exchange2016-ExposedCmdlets-March-2021.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/exchange2016-ExposedCmdlets-March-2021.txt -------------------------------------------------------------------------------- /images/1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/1.png -------------------------------------------------------------------------------- /images/10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/10.png -------------------------------------------------------------------------------- /images/11.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/11.png -------------------------------------------------------------------------------- /images/12.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/12.png -------------------------------------------------------------------------------- /images/13.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/13.png -------------------------------------------------------------------------------- /images/14.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/14.png -------------------------------------------------------------------------------- /images/15.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/15.png -------------------------------------------------------------------------------- /images/16.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/16.png -------------------------------------------------------------------------------- /images/17.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/17.png -------------------------------------------------------------------------------- /images/18.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/18.png -------------------------------------------------------------------------------- /images/19.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/19.png -------------------------------------------------------------------------------- /images/2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/2.png -------------------------------------------------------------------------------- /images/3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/3.png -------------------------------------------------------------------------------- /images/4.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/4.png -------------------------------------------------------------------------------- /images/5.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/5.png -------------------------------------------------------------------------------- /images/6.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/6.png -------------------------------------------------------------------------------- /images/7.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/7.png -------------------------------------------------------------------------------- /images/8.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/8.png -------------------------------------------------------------------------------- /images/9.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/9.png -------------------------------------------------------------------------------- /images/MeetingAlert.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/MeetingAlert.png -------------------------------------------------------------------------------- /images/mitmproxy.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/HEAD/images/mitmproxy.png --------------------------------------------------------------------------------