Tag: PowerApps

• [$15,000 Bounty] M365 Phish: Power Platform Privilege Escalation and Pivoting (29 Feb 2024)
  Exploring the M365 Power Platform as a means of privilege escalation and flexing control over a phishing victim's SharePoint, OneDrive, Outlook, and Microsoft Teams data.
• M365 Internal Phish: Abusing the Power Platform for SharePoint/OneDrive Privilege Escalation (13 May 2022)
  An internal phishing POC leveraging Microsoft 365 citizen development tools (Power Platform). Phish for access to a target user's OneDrive and all SharePoint sites they own.
• Scanning and Hooking Dynamic, Client-Side Data in Modern Web Applications (22 Nov 2021)
  Scanning the DOM for interesting data + hooking getters/setters. Demonstrating POC w/ a PowerApps example.

---

All Tags

POC Hacking JavaScript reverse-engineering SharePoint PowerApps Debugging Cloud BugBounty Browser TypeScript Tutorial Privilege-Escalation Power-Automate OneDrive Microsoft M365 Joplin Game-Hacking Electronjs Chromium Browser-Extension x64dbg x32dbg pykd mona.py mobile linux il2cpp adb XXS Wordpress WinDbg-Preview WinDbg Web-Appplication Web VSCode VPS Unity Tooling Static-Analysis Race-Condition Python PowerShell Power-Platform Phishing Pentesting Paypal Payment-Gateway Outlook Oracle Optimization Open-Source Microsoft-Teams Microsoft-Edge Javascript Java Image-Manipulation IDE HackerOne GraphQL Google-Maps Frida Extension ExpressVPN Exploits Email Electron.js Dynamic-Testing Docker Development Credential-Dumping CodeQL Code-Review CTF BurpSuite BugCrowd Blender Android .apk