inurl:/_layouts/mobile/view.aspx?List=

				
I came across on a string \ dork that does not exist anywhere and it allows

you to see the metadata of all the domain's content & index everything.



here is the dork 'inurl:/_layouts/mobile/view.aspx?List='



It enables you to access MIcrosoft Sharepoint CMS based domains

In the following format

You're able to view the source user (modified or created by)



1. Depending on the target it can be used in a brute-force attack for

constructing a password list with the internal user information.

2. It is a serious information disclosure issue (due to the reason that

some Government websites also use MIcrosoft Sharepoint) and it discloses

their employees names.



Eva Prokofiev
            
				

inurl:/_layouts/mobile/view.aspx?List= Google Dork Source : inurl:/_layouts/mobile/view.aspx?List=