Hunting for Vulnerabilities in Microsoft SharePoint: Case Study
summary
Presentation demonstrates techniques for finding vulnerabilities in Microsoft SharePoint, a complex and well-studied product. It analyzes two real-world flaws: a deserialization vulnerability that allows remote code execution and an unusual XXE attack that enables reading files on the server.
AI-written summary · about
chapters (4)
- 0:00Introduction
- 14:00XXE vulnerability in SharePoint 2024
- 30:30RCE via deserialization
- 44:37Demo and summary
related talks
32mWeaponizing Python for Good: Building a Next-Gen CVE Scanner That Detects Zero-Day Vulnerability
47mToolShell, Patch Bypass, and the AI That Might Have Seen It Coming
45mThe Code Behind The Vulnerability
44mSelected Vulnerabilities in Web Applications
58mThe Code Behind The Vulnerability
40mFighting Where They Aren't: How Attackers Avoid Endpoints in Modern Attacks
43mHunting for Bugs, Catching Dragons
47mFrom Theory To Practice: Navigating The Challenges Of Vulnerability Research