skills.rest
Kisilev13
Kisilev13COMMUNITY
Explore all skills by this author →
GitHub

hunt-sharepoint

Enumerate SharePoint Server attack surfaces and demonstrate CVE-2025-53770 exploitation.

Updated Jun 18, 2026
Search Tags:#exploitation#sharepoint#attack surface#security auditing#vulnerability hunting
One-click install
npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill hunt-sharepoint-kisilev13
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-sharepoint
Source: https://github.com/Kisilev13/Hermes-Agent-Workspace/tree/main/skills/hunt-sharepoint
Command: npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill hunt-sharepoint-kisilev13

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, jq, python3, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill unit is designed to help security professionals hunt for vulnerabilities in SharePoint Server instances, including enumeration of attack surface and exploitation of known flaws.

Core Features & Use Cases

  • Vulnerability Hunting: Identifies and reports on vulnerabilities in SharePoint Server.
  • Attack Surface Enumeration: Discloses potential attack vectors and sensitive information.
  • Exploitation: Demonstrates the exploitation of specific vulnerabilities like CVE-2025-53770.
  • Use Case: Security researchers and bug bounty hunters can use this skill to identify and report vulnerabilities in SharePoint Server instances within their scope.

Quick Start

Use the hunt-sharepoint skill to enumerate the attack surface of a SharePoint Server instance at 'https://target.example'.

Frequently Asked Questions about hunt-sharepoint

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate the attack surface of a SharePoint Server instance?▼

To enumerate a SharePoint Server attack surface, this Skill processes HTTP requests via curl to disclose potential attack vectors and sensitive information, outputting identified vulnerabilities for security auditing.

Can I exploit known vulnerabilities like CVE-2025-53770 on SharePoint Server?▼

Yes, you can exploit known SharePoint Server vulnerabilities like CVE-2025-53770. This Skill demonstrates exploitation of specific flaws to validate findings during security audits and bug bounty hunting.

What tools do I need to hunt for SharePoint vulnerabilities?▼

You need curl, jq, and python3 installed to hunt for SharePoint vulnerabilities. These dependencies handle HTTP requests, JSON parsing, and script execution required for attack surface enumeration.

How does attack surface enumeration improve SharePoint security auditing?▼

Attack surface enumeration improves SharePoint security auditing by discovering exposed entry points and sensitive information. This allows security researchers to map potential vectors before attempting active exploitation.

Is this SharePoint vulnerability hunting approach suitable for bug bounty programs?▼

Yes, this approach is suitable for bug bounty programs. Security researchers can use it to identify and report vulnerabilities within scoped SharePoint Server instances during authorized testing.

Related Skills

Explore More Software Engineering Skills→
EntroVyxEntroVyx
3

hunt-wordpress

Identify and exploit WordPress security vulnerabilities including REST API misconfigurations and XMLRPC abuse.

Community
Advanced
bpnrockstarbpnrockstar

auto-hunt

Automate bug bounty hunting from reconnaissance through exploitation and reporting.

Community
Advanced
EntroVyxEntroVyx
3

gitlab-public-recon

Enumerate public GitLab projects and extract sensitive configuration files and CI/CD variables.

Community
Intermediate
cmndcntrlcybercmndcntrlcyber
3

hunt-auth-bypass

Identify and exploit authentication bypass vulnerabilities in software systems.

Community
Advanced