PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Salesforce Penetration Testing Fundamentals

projectblack.io | research | #access-control | #penetration-testing | #salesforce | #soql-injection | #aura
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Salesforce penetration testing fundamentals: enumerate custom objects and fields for access-control issues, review Apex code for SOQL injection and IDORs, and dump objects with aura-dump.
Published
Collected

Related coverage

blog · bishopfox.com
SFDC Secure Development Cheat Sheet
A Salesforce secure development cheat sheet for passing the AppExchange security review, covering XSS, CRUD/FLS, insecure sharing and storage, SOQL injection, external comms, and CSRF.
vulnerability · xbow.com
Finding XSS in Salesforce Aura Components: How XBOW Got Creative
Chronicles XBOW's XSS discovery in Salesforce Aura components (the /sfsites/aura endpoints) through methodical reconnaissance and creative parameter fuzzing; fixed via coordinated disclosure.
research · semperis.com
Agent Identities: Design Deep Dive
Chapter four of the Semperis guide dissects Agent ID design: how blueprints, agent identities and agent users map to the Microsoft Graph data model, and how permission types stack up.
research · slcyber.io
Gaining access to Uber's user data through AMPScript evaluation
An obscure subdomain on Uber's attack surface exposed an internal AMPScript console, enabling extraction of user data via LookupRows.
blog · projectblack.io
Bypassing EDR with Local AI
A pentest shows Claude refuses to build an LSASS dumper, but local DeepSeek and uncensored Qwen models produce a working XOR-encrypted minidumper, making AI-assisted EDR evasion nearly effortless.
blog · projectblack.io
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.
Back