Ok, So I have an assignment to pentest a sharepoint site... I will obviously do the necessary like I would in any other test but want to know if anyone has any tips or resources they can point me to that may help...

Cheers

I forgot where I got this list, but here are some paths of note you may wish to try. You will need to plug any subsite paths before them:


/_layouts/viewlsts.aspx
/forms/allitems.aspx
/forms/webfldr.aspx
/forms/mod-view.aspx
/forms/my-sub.aspx
/pages/categoryresults.aspx
/categories/viewcategory.aspx
/sitedirectory
/editdocs.aspx
/workflowtasks/allitems.aspx
/lists/tasks/
/categories/allcategories.aspx
/categories/SOMEOTHERDIR/allcategories.aspx
/mycategories.aspx
/lists/
        /allitems.aspx
        /default.aspx
        /allposts.aspx
        /archive.aspx
        /byauthor.aspx
        /calendar.aspx
        /mod-view.aspx
        /myposts.aspx
        /my-sub.aspx
        /allcomments.aspx
        /mycomments.aspx
/_layouts/userdisp.aspx
/_layouts/help.aspx