Discover and exploit vulnerabilities in Microsoft SharePoint Server farms.
npx skills add https://github.com/Skobyn/talon --skill hunt-sharepoint-skobyn
Please help me install this Agent Skill. Skill: hunt-sharepoint Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-sharepoint Command: npx skills add https://github.com/Skobyn/talon --skill hunt-sharepoint-skobyn
This Skill automates the discovery and exploitation of vulnerabilities in Microsoft SharePoint Server farms, providing a streamlined approach to red-teaming and bug hunting.
Run the hunt-sharepoint skill to enumerate endpoints and identify vulnerabilities in your SharePoint farm.
High-intent search queries and answers about installing and using this skill.
Discover SharePoint farm vulnerabilities by enumerating anonymous endpoints, extracting version disclosures, and probing legacy SOAP login bypasses. This process identifies unpatched code paths and exposed configuration issues.
The NTLM Type-2 AD topology disclosure is an exploitation technique that leaks Active Directory domain details. It extracts internal AD topology information by analyzing NTLM Type-2 challenge responses from SharePoint servers.
Yes, you can exploit end-of-life unpatched SharePoint code paths using the ToolShell precondition chain. This technique chains specific preconditions to execute toolshell commands against deprecated legacy components.
Bypass legacy SOAP authentication in SharePoint by targeting deprecated web service endpoints. The Skill identifies specific SOAP login bypass vulnerabilities that allow unauthenticated access to restricted farm resources.
Yes, this Skill requires access to SharePoint headers and paths to enumerate endpoints and verify versions. Header and path data are essential inputs for anonymous endpoint enumeration and vulnerability identification.
The ToolShell precondition chain is a SharePoint exploitation technique that sequences specific prerequisite conditions. This chain allows attackers to achieve toolshell execution by manipulating legacy application states.
Kisilev13Detect NTLM information disclosure on IIS, SharePoint, and Exchange services.
jayjpatel9717Automate red team network simulation engagements from reconnaissance to reporting.
uphiagoCapture anonymous NTLM Type-2 challenges from IIS, SharePoint, and Exchange endpoints.
ntuan2502Execute a structured penetration testing lifecycle from reconnaissance to reporting.
