hunt-sharepoint

To find vulnerabilities in SharePoint Server farms, this Skill detects end-of-life versions, legacy SOAP login bypass flaws, and NTLM topology disclosure, requiring only a target SharePoint server URL to map the attack surface and identify exploitable security issues.

Legacy SOAP login bypass is an authentication vulnerability in SharePoint Server that this Skill exploits by targeting outdated SOAP endpoints, allowing red team assessments to bypass security controls and access the target farm.

Yes, you can use this Skill for red team assessments on SharePoint Subscription Edition, as it targets SharePoint Server farms including 2013, 2016, 2019, and Subscription Edition to discover end-of-life vulnerabilities and NTLM topology disclosure.

Yes, this SharePoint exploitation tool requires Python dependencies including requests, BeautifulSoup, html.parser, and lxml to parse responses and interact with target SharePoint server URLs during vulnerability discovery and assessments.

The best way to map the SharePoint attack surface is using this Skill to enumerate endpoints, disclose server versions, and detect NTLM topology, providing a methodology for exploiting identified vulnerabilities during bug bounty hunting.

SharePoint NTLM topology disclosure matters because it reveals internal server architecture and authentication pathways, enabling security researchers to map hidden endpoints and identify exploitation opportunities within the target farm.