*.asmx文件漏洞搜索

Admin Web Service

http://<AdminSite>/_vti_adm/Admin.asmx

Provides methods for managing a deployment of Microsoft Windows SharePoint Services, such as for creating or deleting site collections.

CreateSite

DeleteSite

--------------------------------------------------------------------------------

Alerts

http://<Site>/_vti_bin/Alerts.asmx

Provides methods for working with alerts for list items in a SharePoint site.

DeleteAlerts

GetAlerts 

Authentication

http://<Site>/_vti_bin/Authentication.asmx

Login

Mode 

Copy

Provides methods for copying files to or from or within a SharePoint site.

CopyIntoItems

CopyIntoItemsLocal

GetItem 

Document Workspace

http://<Site>/_vti_bin/Dws.asmx

Exposes methods for managing Document Workspace sites and the data they contain.

CanCreateDwsUrl

CreateDws

CreateFolder

DeleteDws

DeleteFolder

……

------------------------------------------------------------------------------

Forms

http://<Site>/_vti_bin/Forms.asmx

Provides methods for returning forms that are used in the user interface when working with the contents of a list.

GetForm

GetFormCollection 

Imaging

http://<Site>/_vti_bin/Imaging.asmx

Provides methods that enable you to create and manage picture libraries.

CheckSubwebAndList

CreateNewFolder

Delete

Download

Edit

…… 

-------------------------------------------------------------------------------

List Data Retrieval (StsAdapter)

http://<Site>/_vti_bin/DspSts.asmx

Represents the adapter service used to perform queries against sites and lists in Microsoft Windows SharePoint Services.

Query 

Lists

http://<Site>/_vti_bin/Lists.asmx

Provides methods for working with lists and list data.

AddAttachment

AddDiscussionBoardItem

AddList

Meetings

http://<Site>/_vti_bin/Meetings.asmx

Enables you to create and manage Meeting Workspace sites.

AddMeeting

AddMeetingFromICal

CreateWorkspace

People

http://<Site>/_vti_bin/People.asmx

ResolvePrincipals

SearchPrincipals 

Permissions

http://<Site>/_vti_bin/Permissions.asmx

Provides methods for working with the permissions for a site or list.

AddPermission

AddPermissionCollection

GetPermissionCollection

RemovePermission

RemovePermissionCollection

UpdatePermission 

Site Data

http://<Site>/_vti_bin/SiteData.asmx

Provides methods that return metadata or list data from sites or lists in Microsoft Windows SharePoint Services.

EnumerateFolder

GetAttachments

GetChanges

GetContent

GetList

GetListCollection

Sites

http://<Site>/_vti_bin/Sites.asmx

Provides a method for returning information about the collection of site templates on the virtual server.

Search

http://<Site>/_vti_bin/spsearch.asmx

The QueryService class is the entry point for calling the Search in Microsoft Windows SharePoint Services Query web service.

GetPortalSearchInfo (MOSS only)

GetSearchMetadata (MOSS only)

Users and Groups

http://<Site>/_vti_bin/usergroup.asmx

Provides methods for working with users, role definitions, and groups.

AddGroup

AddGroupToRole

AddRole

AddRoleDef

AddUserCollectionToGroup

Versions

http://<Site>/_vti_bin/Versions.asmx

Provides methods for working with file versions.

DeleteAllVersions

Views

http://<Site>/_vti_bin/Views.asmx

Provides methods for working with views of lists.

AddView

DeleteView

Web Part Pages

http://<Site>/_vti_bin/WebPartPages.asmx

Provides methods for working with Web Parts.

AddWebPart

AddWebPartToZone

AssociateWorkflowMarkup

Webs

http://<Site>/_vti_bin/Webs.asmx

Provides methods for working with sites and subsites.

CreateContentType

CustomizeCss

DeleteContentType

GetActivatedFeatures