SecLists Create sharepoint.txt

Create sharepoint.txt

Open J-GainSec opened this issue 2 years ago • 7 comments

Sourced from https://github.com/GainSec/TreeHouse-Wordlists/blob/master/Microsoft%20SharePoint.txt

A Microsoft Sharepoint wordlist

Jun 27 '22 17:06 J-GainSec

What could this wordlist be used for? If its for detecting a SharePoint instance, it’s too long

Also how did you make this wordlist?

Jun 28 '22 05:06 ItsIgnacioPortal

It's for enumerating what files/functionality are being used to discover the attack surface of a SharePoint instance.

From testing SharePoint instances.

Jun 28 '22 07:06 J-GainSec

It's for enumerating what files/functionality are being used to discover the attack surface of a SharePoint instance.

Interesting.. Could you give me an example? I'm not very familiar with Microsoft Sharepoint

Jun 28 '22 11:06 ItsIgnacioPortal

https://the-infosec.com/2017/04/18/penetration-testing-sharepoint/

Jun 28 '22 13:06 J-GainSec

I see. Alright, now all that's left to do is fix those duplicate slashes.

Also, please rename the wordlist to sharepoint-ennumeration.txt. Always use long, descriptive names, if possible.

Jun 28 '22 19:06 ItsIgnacioPortal

Done!

Jun 28 '22 19:06 J-GainSec

Should be good now

Jun 29 '22 09:06 J-GainSec

Thank you!

Aug 02 '22 05:08 g0tmi1k