How does Jason compare with other open-source Exchange brute-force tools like MailSniper and Ruler?
Jason, MailSniper, and Ruler all brute-force Exchange accounts by accessing web resources and checking for 401 vs successful responses. Jason uses EWS and OAB endpoints with a GUI and supports multithreading, similar to MailSniper (PowerShell, multithreading, CLI) and Ruler (Go, no multithreading, CLI). The article concludes that Jason does not introduce any novel threat, as its principles are identical to existing tools.
MailSniperRuleropen-sourceexchange brute-forcemultithreadingcomparison