Home/Offensive tool/spwebmember
Offensive tool

spwebmember

S0227 · Windows

spwebmember is a Microsoft SharePoint enumeration and data dumping tool written in .NET.

ATT&CK S0227 Offensive · dual-use tool
Sigma rules0 YARA rules0 Live IOCs0
▤

Techniques Used

1
ATT&CK techniques this tool is documented performing. Each links to its detections - Sigma, vendor SIEM rules, and analytics - so you catch the behaviour even when the binary changes.
T1213.002Sharepoint · detections ↗
⚊

Live Indicators

Indicators are defanged for safe handling. Newest first.
Aliases
spwebmember
External lookups - second-class, for what we don’t hold ourselves
MITRE ATT&CKMalpediaMalwareBazaarThreatFox
SOC and Response
CVE triage
Stack monitoring
Am I affected
IOC triage
KEV catalog
Recently exploited
Daily brief
Change tracking
Detection Engineering
Coverage workspace
Detection coverage
Coverage check
Telemetry ceiling
SIEM query builder
Sigma rules
SIEM rules
YARA rules
Network rules
D3FEND
Threat Hunting
Threat actors
ATT&CK techniques
Attack paths
Indicators
Atomic tests
Red Team and Pentest
Exploitability triage
Recon pack
Attack paths
CAPEC patterns
Adversary emulation
Compliance and GRC
Framework mapping
Control assessment
Audit view
Atlas Search Threat actors Techniques Tools & malware CWE CAPEC KEV catalog Package vulns
About All capabilities Pricing API docs Privacy policy Terms of service
threatengine.sh