redttps

SharePoint Dorks

Description

SharePoint is a web-based collaboration and document management platform developed by Microsoft. It allows organizations to create websites, intranets, and secure portals for sharing information, managing content, and working together on documents and projects.


Cheatsheet

  1. Finding Credentials
    2. content:"password" OR content:"username" OR content:"credential" OR content:"secret" OR content:"key" OR content:"token" OR content:"login"
  2. Scripts Containing Sensitive Information
    3. (FileExtension:ps1 OR FileExtension:bat OR FileExtension:sh OR FileExtension:cmd OR FileExtension:py) AND (content:"password" OR content:"secret" OR content:"key" OR content:"credential" OR content:"token")
  3. Files Containing the Domain “ACME"
    4. content:"ACME\\"
  4. Files Containing Sysadmin Commands
    5. content:"net use" OR content:"ipconfig" OR content:"netstat" OR content:"ping" OR content:"tracert" OR content:"nslookup" OR content:"net user" OR content:"net localgroup"
  5. Regular Expression Search for Credential Patterns
    6. (FileExtension:ps1 OR FileExtension:bat OR FileExtension:sh OR FileExtension:cmd OR FileExtension:py OR FileExtension:js OR FileExtension:ts OR FileExtension:rb OR FileExtension:pl OR FileExtension:php OR FileExtension:cs OR FileExtension:java OR FileExtension:go OR FileExtension:r OR FileExtension:sql OR FileExtension:groovy OR FileExtension:scala OR FileExtension:kt OR FileExtension:vb OR FileExtension:vbs OR FileExtension:psm1 OR FileExtension:jsx OR FileExtension:tsx) AND content:/.*(password|passwd|pwd|secret|key|token|api_key|apiKey).*(=|:|=>).*/
  6. Searching for User and Password Pairings
    7. (FileExtension:ps1 OR FileExtension:py OR FileExtension:js OR FileExtension:java OR FileExtension:cs OR FileExtension:php OR FileExtension:rb OR FileExtension:go OR FileExtension:kt) AND (content:/.*(username|user|login).*(=|:|=>).*/ AND content:/.*(password|passwd|pwd|secret).*(=|:|=>).*/)
  7. Credentials in Comments
    8. (FileExtension:ps1 OR FileExtension:py OR FileExtension:js OR FileExtension:java OR FileExtension:cs OR FileExtension:php OR FileExtension:rb OR FileExtension:go OR FileExtension:kt) AND content:/.*(\/\/|#|\/\*|\*).*(password|secret|token).*/

Reference: https://github.com/ZephrFish/LOLSearches