ATT&CKSoftwarespwebmember

spwebmember

S0227

Tool.View on attack.mitre.org

About this tool

spwebmember is a Microsoft SharePoint enumeration and data dumping tool written in .NET.

Techniques used1

Procedure examples1

TechniqueProcedure example
T1213.002
Sharepoint

spwebmember is used to enumerate and dump information from Microsoft SharePoint.

Groups that use it1

Campaigns0

None recorded.

References1

  1. NCC Group APT15 Alive and Strong Open source
    Smallridge, R. (2018, March 10). APT15 is alive and strong: An analysis of RoyalCli and RoyalDNS. Retrieved April 4, 2018.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.