How to Attack SharePoint Servers and Tools to Make It Easier

Explore SharePoint security vulnerabilities and attack techniques in this 42-minute conference talk from DerbyCon 3.0. Dive into SharePoint versions, editions, and apps, examining common issues like improper permissions and content vulnerabilities. Learn about default pages, web part vulnerabilities, and the new white paper on SharePoint security. Discover current tools for SharePoint hacking, including the SharePoint Hacking Diggity Project, Sparty, Horse, SPScan, and the Beef Extension. Gain valuable insights from speakers James Jardine and Kevin Johnson on how to identify and exploit weaknesses in SharePoint servers, enhancing your understanding of enterprise content management system security.

Intro
James Jardine
Kevin Johnson
SharePoint Versions and Editions
SharePoint Apps
Common Issues
Improper Permissions
Finding Permission Issues
Default Pages
SharePoint & Web Part Vulnerabilities
Content Issues
New White Paper
Outline
Current Tools
SharePoint Hacking Diggity Project
Sparty
Horse
SPScan
Beef Extension