{"id":13816486,"url":"https://github.com/0xdevalias/sparty","last_synced_at":"2025-05-15T15:32:36.709Z","repository":{"id":11782938,"uuid":"14323217","full_name":"0xdevalias/sparty","owner":"0xdevalias","description":"Sparty - MS Sharepoint and Frontpage Auditing Tool [Unofficial]","archived":true,"fork":false,"pushed_at":"2013-11-12T08:04:58.000Z","size":152,"stargazers_count":94,"open_issues_count":9,"forks_count":41,"subscribers_count":9,"default_branch":"master","last_synced_at":"2025-05-11T19:45:02.195Z","etag":null,"topics":["frontpage","hack","pentest","sharepoint","sparty"],"latest_commit_sha":null,"homepage":"http://sparty.secniche.org/","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/0xdevalias.png","metadata":{"files":{"readme":"README","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2013-11-12T05:22:26.000Z","updated_at":"2025-04-17T00:42:46.000Z","dependencies_parsed_at":"2022-09-12T15:30:34.953Z","dependency_job_id":null,"html_url":"https://github.com/0xdevalias/sparty","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdevalias%2Fsparty","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdevalias%2Fsparty/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdevalias%2Fsparty/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdevalias%2Fsparty/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/0xdevalias","download_url":"https://codeload.github.com/0xdevalias/sparty/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254367685,"owners_count":22059555,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["frontpage","hack","pentest","sharepoint","sparty"],"created_at":"2024-08-04T05:00:43.075Z","updated_at":"2025-05-15T15:32:36.323Z","avatar_url":"https://github.com/0xdevalias.png","language":"Python","funding_links":[],"categories":["Python"],"sub_categories":[],"readme":"-------------------------------------------------\nSparty - Sharepoint/Frontpage Auditing Tool !\nAuthored by: Aditya K Sood |{0kn0ck}@secniche.org  | 2013\n             Twitter:     @AdityaKSood\nPowered by: SecNiche Security Labs !\n------------------------------------------------\nSparty is an open source tool written in python to audit web applications using sharepoint and frontpage architecture. The motivation behind this tool is to provide an easy and robust way to scrutinize the security configurations of sharepoint and frontpage based web applications. Due to the complex nature of these web administration software, it is required to have a simple and efficient tool that gathers information, check access permissions, dump critical information from default files and perform automated exploitation if security risks are identified. A number of automated scanners fall short of this and Sparty is a solution to that.\n\n\n-----------------------------------\nFunctionalities and capabilities !\n-----------------------------------\n1. Sharepoint and Frontpage Version Detection!\n2. Dumping Password from Exposed Configuration Files!\n3. Exposed Sharepoint/Frontpage Services Scan!\n4. Exposed Directory Check!\n5. Installed File and Access Rights Check!\n6. RPC Service Querying!\n7. File Enumeration!\n8. File Uploading Check!\n\n-----------------------------------------------\nAdditional notes about working and design\n----------------------------------------------\n1. This version of sparty is written in Python 2.6 (final) running on backtrack 5.0.\n2. This version (v 0.1) primarily includes assessment of configuration flaws.\n3. This version is based on the practical testing and assessment of frontpage \u0026 sharepoint.\n\n----------------------------------------------\nRequirements\n----------------------------------------------\n1. This version uses following libraries:\n        import urllib2\n        import re\n        import os, sys\n        import optparse\n        import httplib\n\n2. Python 2.6 is required.\n\n\n-----------------------------------------------\n[+] Things to take care of while using sparty !\n-----------------------------------------------\n\nPlease take this into consideration:\n\n1. Always specify https | http explcitly !\n2. Always provide the proper directory structure where sharepoint/frontpage is installed !\n3. Do not specify '/' at the end of url !\n\n--------------------------\n[+] Sparty Help\n--------------------------\n\n\t---------------------------------------------------------------\n\n          _|_|_|    _|_|_|     _|_|    _|_|_|    _|_|_|_|_|  _|      _|\n         _|        _|    _|  _|    _|  _|    _|      _|        _|  _|\n           _|_|    _|_|_|    _|_|_|_|  _|_|_|        _|          _|\n               _|  _|        _|    _|  _|    _|      _|          _|\n         _|_|_|    _|        _|    _|  _|    _|      _|          _|\n\n        SPARTY : Sharepoint/Frontpage Security Auditing Tool!\n        Authored by: Aditya K Sood |{0kn0ck}@secniche.org  | 2013\n        Twitter:     @AdityaKSood\n\n\t--------------------------------------------------------------\nUsage: sparty.py [options]\n\nOptions:\n  --version             show program's version number and exit\n  -h, --help            show this help message and exit\n\n  Frontpage::\n    -f FRONTPAGE, --frontpage=FRONTPAGE\n                        \u003cFRONTPAGE = pvt | bin\u003e -- to check access permissions\n                        on frontpage standard files in vti or bin directory!\n\n  Sharepoint::\n    -s SHAREPOINT, --sharepoint=SHAREPOINT\n                        \u003cSHAREPOINT = forms | layouts | catalog\u003e -- to check\n                        access permissions on sharepoint standard files in\n                        forms or layouts or catalog directory!\n\n  Mandatory::\n    -u URL, --url=URL   target url to scan with proper structure\n\n  Information Gathering and Exploit::\n    -v FINGERPRINT, --http_fingerprint=FINGERPRINT\n                        \u003cFINGERPRINT = ms_sharepoint | ms_frontpage\u003e --\n                        fingerprint sharepoint or frontpage based on HTTP\n                        headers!\n    -d DUMP, --dump=DUMP\n                        \u003cDUMP = dump | extract\u003e -- dump credentials from\n                        default sharepoint and frontpage files (configuration\n                        errors and exposed entries)!\n    -l DIRECTORY, --list=DIRECTORY\n                        \u003cDIRECTORY = list | index\u003e -- check directory listing\n                        and permissions!\n    -e EXPLOIT, --exploit=EXPLOIT\n                        EXPLOIT = \u003crpc_version_check | file_upload |\n                        config_check\u003e -- exploit vulnerable installations by\n                        checking RPC querying and file uploading\n    -i SERVICES, --services=SERVICES\n                        SERVICES = \u003cserv | services\u003e -- checking exposed\n                        services !\n                     services !\n\n  Authentication [devalias.net]:\n    -a AUTHENTICATION, --auth-type=AUTHENTICATION\n                        AUTHENTICATION = \u003cntlm\u003e -- Authenticate with NTLM\n                        user/pass !\n\n  General::\n    -x EXAMPLES, --examples=EXAMPLES\n                        running usage examples !\n\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0xdevalias%2Fsparty","html_url":"https://awesome.ecosyste.ms/projects/github.com%2F0xdevalias%2Fsparty","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0xdevalias%2Fsparty/lists"}