Sharepoint Security Scanner
About this tool
Discover various security weaknesses and vulnerabilities in web applications built on top of Microsoft SharePoint and FrontPage.
List of tests performed
The following tests are done every time the scanner runs:
Gather information about the SharePoint version installed
Analyze SharePoint configuration settings
Verify public exposure of SharePoint web services
Attempt to do user enumeration
Check permissions on default SharePoint \_layouts, \_catalogs, and forms
Find public information (indexed by Google) about the target
The SharePoint security assessment is performed remotely, in a black-box manner. The results of the scan should be interpreted from the perspective of an anonymous user who accesses the target website.
Parameters
Target URL: This is the URL of the SharePoint website that will be scanned. All URLs must start with 'http' or 'https'.
How it works
The scanner connects to the target SharePoint server and tries to retrieve certain default pages that indicate the presence of the mentioned vulnerabilities.
Furthermore, the HTTP response headers received from the server are also analyzed to find security issues.