Files
nuclei-templates/http/technologies/microsoft/sharepoint-lists-api-disclosure.yaml
2025-12-03 23:02:17 +00:00

31 lines
1.0 KiB
YAML

id: sharepoint-lists-api-disclosure
info:
name: Microsoft SharePoint - List API Disclosure
author: theamanrawat
severity: low
description: |
Detected exposed SharePoint lists-api endpoint without proper authentication, exposing site content and metadata.
reference:
- https://learn.microsoft.com/en-us/sharepoint/dev/sp-add-ins/working-with-lists-and-list-items-with-rest
metadata:
verified: true
max-request: 1
vendor: microsoft
product: sharepoint
shodan-query: http.title:"SharePoint"
fofa-query: title="SharePoint"
tags: sharepoint,microsoft,exposure,misconfig
http:
- method: GET
path:
- "{{BaseURL}}/_api/web/lists"
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains_all(body, "TemplateFeatureId","d:ParentWebUrl", "Web/Lists")'
condition: and
# digest: 4a0a00473045022100f90cb84679a396554048fabda189151e89252e3e51b5eab5806cbe4a089c6557022059528ac74b5eb6730550068fe05d95fd8ba47320f4dbeaa9bf5e9a4c5b8b2d69:922c64590222798bb761d5b6d8e72950