---
id: 7442
title: "The journey of exploiting a Sharepoint vulnerability."
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/the-journey-of-exploiting-a-sharepoint-vulnerability/"
published_at: "2017-10-18T10:44:00Z"
tags: ["rce", "sharepoint", "pentest", "aspnet", "viewstate", "mac-validation", "ms13-067"]
phying_url: "https://phying.com/item/7442"
lang: en
---

# The journey of exploiting a Sharepoint vulnerability.

## Summary

A pentest write-up on exploiting an unpatched SharePoint 2010 portal via MS13-067, where disabled ASP.NET VIEWSTATE MAC validation let the author build a missing PoC into remote code execution.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2017-10-18T10:44:00Z
- **Original:** https://blog.viettelcybersecurity.com/the-journey-of-exploiting-a-sharepoint-vulnerability/
- **Phying News:** https://phying.com/item/7442