.

Pen Testing Sharepoint

<<

T_Bone

Full Member
Full Member

Posts: 199

Joined: Sat Feb 21, 2009 7:11 am

Post Fri Oct 01, 2010 8:07 am

Pen Testing Sharepoint

Ok, So I have an assignment to pentest a sharepoint site... I will obviously do the necessary like I would in any other test but want to know if anyone has any tips or resources they can point me to that may help...

Cheers
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Fri Oct 01, 2010 8:45 am

Re: Pen Testing Sharepoint

Scavenge for info first and foremost; people post all kinds of useful tidbits. Always do recon before attempting any fancy techniques.
The day you stop learning is the day you start becoming obsolete.
<<

tturner

User avatar

Sr. Member
Sr. Member

Posts: 435

Joined: Thu Jun 26, 2008 4:50 pm

Post Fri Oct 01, 2010 8:59 am

Re: Pen Testing Sharepoint

I forgot where I got this list, but here are some paths of note you may wish to try. You will need to plug any subsite paths before them:


/_layouts/viewlsts.aspx
/forms/allitems.aspx
/forms/webfldr.aspx
/forms/mod-view.aspx
/forms/my-sub.aspx
/pages/categoryresults.aspx
/categories/viewcategory.aspx
/sitedirectory
/editdocs.aspx
/workflowtasks/allitems.aspx
/lists/tasks/
/categories/allcategories.aspx
/categories/SOMEOTHERDIR/allcategories.aspx
/mycategories.aspx
/lists/
        /allitems.aspx
        /default.aspx
        /allposts.aspx
        /archive.aspx
        /byauthor.aspx
        /calendar.aspx
        /mod-view.aspx
        /myposts.aspx
        /my-sub.aspx
        /allcomments.aspx
        /mycomments.aspx
/_layouts/userdisp.aspx
/_layouts/help.aspx
Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, GSSP-JAVA, OPSE, CSWAE, CSTP, VCP

WIP: Vendor WAF stuff

http://sentinel24.com/blog @tonylturner http://bsidesorlando.org
<<

T_Bone

Full Member
Full Member

Posts: 199

Joined: Sat Feb 21, 2009 7:11 am

Post Tue Oct 05, 2010 4:45 am

Re: Pen Testing Sharepoint

I would expect the document below that contains 20 pages to be SUPERB at that price!

http://www.gartner.com/DisplayDocument?id=894420

Return to Web Applications

Who is online

Users browsing this forum: No registered users and 0 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software