One Day Sec

What are the permission differences when deploying this webshell on Exchange vs SharePoint, and how can they be leveraged?

On Exchange, the webshell runs with **System** privileges, allowing direct invocation of Exchange PowerShell cmdlets (e.g., `Get-MailboxServer`). On SharePoint, it runs with **user** permissions, and executing SharePoint PowerShell commands (e.g., `Get-SPSite`) requires the user to have database access, which can be granted via `Add-SPShellAdmin`. This distinction is crucial for planning post-exploitation actions; the article provides command examples for both environments. For further command-line approaches to Exchange, see the related OWA email reading article.
ExchangeSharePointpermissionsSystemuserPowerShellAdd-PSSnapin

Browse all Q&A →