SharePointSecurityMonitor

🛡️ SharePoint Security Monitor v5.0 🚀 A comprehensive PowerShell-based SharePoint security monitoring solution with CVE-2023-29357 and CVE-2023-33157 protection, intelligent DLL management, advanced threat detection, and automated alerting capabilities. 📋 Table of Contents 🌟 Project Overview ✨ Key...

cve-2019-0604-SP2010-netv3.5

cve-2019-0604-SP2010-netv3.5 Recently, I came across a Sharepoint 2010 SP2 and all the Proof of Concept that I tested didn't work until I realized that the server was on .net 3.5 which require a different library. Here is the .dll for .net 3.5. The code came from...

CVE-2025-53770-Exploit

📌 SharePoint WebPart Injection Exploit Toolkit 🍕 Exploit tool for SharePoint WebPart Injection via ToolPane.aspx, leading to .NET deserialization and potential remote code execution RCE. Developed by: @GOTOCVE 🌍 Overview This tool exploits a vulnerability in Microsoft SharePoint on-premises that...

CVE-2025-53770

Divine Absolute - CVE-2025-53770 Exploit Tool Overview Divine Absolute is a sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770 , a critical CVSS 9.8 unauthenticated remote code execution RCE vulnerability in on-premises Microsoft SharePoint Server 2016, 2019, Subscription...

CVE-2025-53770

CVE-2025-53770 This is a scanner for the SharePoint unauthenticated Remote Code Execution vulnerability, assigned CVE number CVE-2025-53770. The code for this was written by reverse-engineering a payload seen in the wild. Use at your own risk, I am not responsible for any negative impact this mig...

ToolShell

Exploit for SharePoint ToolShell. Blog: https://blog.viettelcybersecurity.com/sharepoint-toolshell/ How to use: python exploit.py -u -c Eg: python exploit.py -u http://10.0.1.12/sites/test -c calc @l0gg...

CVE-2026-50522

CVE-2026-50522 Poc : SharePoint Deserialization RCE SharePoint Server Unauthenticated Remote Code Execution via SecurityContextToken Cookie Deserialization Mass-scan exploit for CVE-2026-50522 targeting on-premises Microsoft SharePoint Server. Abuses insecure BinaryFormatter deserialization in th...

CVE-2023-29357

Recreation of the SharePoint PoC for CVE-2023-29357 in C with lots of help from ChatGPT. Build with .Net Version 4.7.2 in Visual Studio 2017 Use NuGet Package manager to install any missing packages Yara rules for detection below Usage: CVE-2023-29357.exe https://yoursharepoint.lol -v Huge shouto...

CVE-2023-24955-PoC

CVE-2023-24955-PoC Exploit for Microsoft SharePoint 2019 An exploit published for a vulnerability named CVE-2023-24955 .I saw the code and There was some bug in the resolveTargetInfo and getOAuthInfo . Then I fixed it and it's for u now. ❗❗❗❗❗❗ Remember that you should run it with Python2 I tried...

Royal_APT

RoyalAPT Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research Sharepoint tool Among the tools developed by the group for the victim, APT15 created a .net tool to enumerate the victim's sharepoint database. Below is an screen-shot from the decompiled binary...

CVE-2025-53770-Scanner

CVE-2025-53770 SharePoint Vulnerability Scanner 100% hacked together with all the tweets floating around with payloads and different attacks, so comes with zero warranty etc. The scanner is designed to identify vulnerable instances and has a config with known uses in the wild of exploitation, it'...

sharepoint-deserialization-security-assessment

CVE-2026-45659 - Microsoft SharePoint Deserialization RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for SharePoint deserialization risk, including executive summary, technical impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details...

CVE-2024-30043-XXE

CVE-2024-30043-XXE Credit The impact of the vulnerability is limited at present, but thanks to https://x.com/chudyPB for providing a clever bypass idea. https://x.com/chudyPB...

CVE-2026-65660-Poc

MS SharePoint CVE-2026-65660 - Malicious Register Directive Code Injection Exploit Description This repository provides a production-ready exploit for CVE-2026-65660 Improper Control of Generation of Code, CWE-94 in Microsoft SharePoint Server. The vulnerability stems from unescaped quote injecti...

CVE-2025-53770

Microsoft SharePoint CVE-2025-53770 POC DISCLAIMER: This code/payload is provided for educational purposes only. The author does not condone or support any unauthorized or malicious use of this code. Use it only in environments you own or have explicit permission to test. Misuse may violate laws...

CVE-2025-53770

CVE-2025-53770 SharePoint Description The deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code remotely and compromise the system. Microsoft is aware of active exploitation and is preparing a comprehensive update. Ensure that mitigations...

CVE-2025-53770

CVE-2025-53770 Research Lab This repository appears to be a proof-of-concept research project for validating a SharePoint-style deserialization and tool-pane processing issue in a controlled lab. It includes a Python driver, a mock vulnerable application, and container assets for isolated testing...

cve-2023-29357-Sharepoint

CVE 2023 29357 Information SharePoint Target Windows Server 2016 with SharePoint 2019 Login : FSI\Administrateur Password : Admin123! IP : 192.168.56.4 Hostname : WIN-HEVUJ4GJMA6 Attacker Lubuntu Version 22.04.3 Login : fsi Password : Admin123! IP : 192.168.56.3 Setting up the test environment...

irdoc-app

IRDoc - Incident Response Documentation Platform Timeline-first IR documentation with visual report builder, SharePoint auto-sync, and AI-assisted summaries. What is IRDoc? IRDoc is a self-hostable, open-core incident response documentation platform for SOC analysts, IR engineers, and MSSPs. It...

sparty

Sparty - Sharepoint/Frontpage Auditing Tool ! Authored by: Aditya K Sood |[email protected] | 2013 Twitter: @AdityaKSood Powered by: SecNiche Security Labs ! Sparty is an open source tool written in python to audit web applications using sharepoint and frontpage architecture. The motivation...