147 个 ・ 集成工具: SharePoint · 按人气排序
Build Python AI applications on Microsoft Foundry with azure-ai-projects. Provides examples for creating agents, connecting tools, managing conversations and project resources, and running evaluations through Foundry and OpenAI-compatible clients.
中文简介正在准备中。当前显示英语简介。
Helps build AI agents in .NET with persistent conversation threads. Covers messages, execution status, streaming responses, document search, and custom function calls using Azure.AI.Agents.Persistent, with examples for creating agents and cleaning up resources.
中文简介正在准备中。当前显示英语简介。
Integrate Microsoft Graph SDK into .NET, TypeScript/JavaScript, or Python applications to access Microsoft 365 data. Covers authentication, permissions, paginated results, incremental synchronization, change notifications, and retries when requests hit service limits.
中文简介正在准备中。当前显示英语简介。
Investigate failed Power Automate cloud flows through FlowStudio MCP. Inspect each action’s inputs and outputs, trace incorrect data upstream, fix expression or data issues, and replay a previous run to check the repair.
中文简介正在准备中。当前显示英语简介。
Build and update Power Automate cloud flows through FlowStudio MCP, a connection that lets an agent use external tools. The skill guides workflow definitions, service connections, deployment, verification, and testing without opening the Power Automate portal.
中文简介正在准备中。当前显示英语简介。
Investigate stolen OAuth tokens and their reuse in Microsoft Entra ID through sign-in log analysis. Follow response procedures for revoking sessions and reviewing app permissions, and configure device-bound token protection and session monitoring for Azure and M365 environments.
中文简介正在准备中。当前显示英语简介。
Simulate device-code and app-consent phishing in an explicitly authorized Microsoft Entra ID environment. Assess whether authentication and consent controls prevent token misuse, map reachable Microsoft 365 resources, and document findings with remediation recommendations.
中文简介正在准备中。当前显示英语简介。
Find brand materials across connected workplace platforms, rank useful sources, and compile a structured discovery report. Surface brand elements, conflicting guidance, and unanswered questions to support a later review or brand voice guideline document.
中文简介正在准备中。当前显示英语简介。
Set up a litigation practice profile through an interview tailored to your role and the side you represent. Record risk preferences, writing conventions, and working context in CLAUDE.md for later litigation tasks, and check available integrations.
中文简介正在准备中。当前显示英语简介。
Set up regulatory monitoring by identifying which regulators to follow, what changes deserve attention, and where company policies are stored. The interview builds a watchlist, indexes policies, and checks which external connections actually respond.
中文简介正在准备中。当前显示英语简介。
Set up a privacy legal plugin through an interview and existing documents. Capture applicable regulations, data processing agreement positions, and privacy impact assessment formats in shared settings, with options to resume setup or recheck integrations.
中文简介正在准备中。当前显示英语简介。
Set up product legal workflows through an interview about company context, review practices, and approval routes. Past launch reviews help establish which risks block release, while connector checks record which tracking and document services actually respond.
中文简介正在准备中。当前显示英语简介。
Turn dispute documents into a sourced timeline by extracting dated events and merging duplicates. It highlights significance for the case, records missing source coverage, and supports updated timelines, factual narratives, and timelines focused on a named witness.
中文简介正在准备中。当前显示英语简介。
Set up a corporate legal practice profile through guided questions about responsibilities, company context, document formats, and review thresholds. Select relevant practice areas, save their settings, and refresh individual modules or check connected services later.
中文简介正在准备中。当前显示英语简介。
Set up a commercial contracts assistant around your team's review standards and approval rules. The interview creates an editable practice profile and can compare stated negotiation positions with terms found in signed agreements.
中文简介正在准备中。当前显示英语简介。
Route Data Analytics plugin-level requests and broad analytics work to the right focused workflow. Use when Data Analytics is at-mentioned, or for analytics requests involving data, metrics, dashboards, reports, charts, notebooks, spreadsheets, KPIs, market sizing, or semantic layers.
中文简介正在准备中。当前显示原文说明。
Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments. Covers the 5-stage recon pipeline (seed discovery, asset expansion, enrichment, exposure analysis, reporting), asset-graph discipline with 29 asset types, severity rubric (CRITICAL/HIGH/MEDIUM/LOW/INFO), confidence upgrade workflows, time budgeting, asset-level triage rules, scale-based tactics, identity-fabric mapping (Entra/Okta/ADFS/Google/SAML/M365 Teams+SharePoint+OAuth), API and auth-map methodology, JavaScript deep analysis, mobile attack surface, cloud attack surface, breach×identity correlation, detectability tagging, detection-aware probing (back-off, persona rotation), read-only validator discipline, WAF/CDN bypass + origin discovery, vulnerability prioritization (CVE/EPSS/KEV), phishing infrastructure planning + pretext development, bug bounty submission templates, client deliverable templates with risk translation, threat-actor investigation (incl. RU/CN pivots), cryptocurrency tracing, image/video forensics, chronolocation. Use when planning or executing reconnaissance against authorized targets, mapping an organization's external attack surface, investigating a person/entity, tracing crypto flows, geolocating media, or performing attribution work.
中文简介正在准备中。当前显示原文说明。
Operational arsenal for authorized external red-team and bug-bounty recon. Concrete probes, wordlists, regexes, dorks, curl one-liners for: subdomain enum, GraphQL/Swagger/REST discovery, identity fabric (Entra/Okta/ADFS/Google/SAML/M365 deep — Teams/SharePoint/OneDrive), cloud bucket enum (S3/GCS/Azure), CDN/WAF bypass, origin discovery, vendor fingerprinting (Citrix/F5/Pulse/Fortinet/PaloAlto/Cisco/VMware), CI/CD exposure, 48-pattern secret-scan catalog (AWS/GCP/GitHub/Stripe/Slack/Anthropic/OpenAI/Atlassian/DataDog/npm/PyPI), Postman workspaces, breach correlation (HudsonRock/HIBP/DeHashed/IntelX), TLS/JA3 audit, certificate transparency, JS endpoint extraction, package registry leaks, mobile/APK recon, sat imagery, sector-specific recon (healthcare DICOM, finance SWIFT, ICS/SCADA Modbus/BACnet). Detail content in 15 modular reference files, loaded on demand. Use for any authorized recon: scoping, asset discovery, attack-path mapping, secret triage, severity scoring.
中文简介正在准备中。当前显示原文说明。
Microsoft 365 / Entra ID red-team attack chain — current 2026 reality. AADSTS code reference, user enumeration vectors (with hardening status), Smart Lockout math, Conditional Access bypass options, ROPC + SAML SSO browser flow, Burp/Playwright templates. Built from authorized red-team work where ROPC spray surfaced pre-existing lockouts and CA-blocked credentials, plus real-time external attacker activity correlation. Use for any M365/Entra credential attack, password spray, user enumeration, CA-bypass exploration, or active-attacker-detection scenario.
中文简介正在准备中。当前显示原文说明。
Hunting skill for xxe vulnerabilities. Built from 10 public bug bounty reports including SVG-upload XXE, Office-doc (PPTX/DOCX) XXE, SOAP XXE, SAML AssertionConsumer XXE, blind OOB XXE via DTD callback, parameter-entity XXE, XXE-to-LFI, XXE-to-SSRF, and XXE-to-RCE chains (Adobe Commerce CosmicSting CVE-2024-34102). Use when hunting XXE on any target — emphasis on OOB-Or-It-Didn't-Happen Gate for blind cases.
中文简介正在准备中。当前显示原文说明。
Hunt Microsoft SharePoint Server (2013/2016/2019/Subscription Edition) on-prem farms — anonymous endpoint enumeration, version disclosure, legacy SOAP login bypass (Authentication.asmx), ToolShell precondition chain (CVE-2025-53770), SafeControl reflection enumeration via Picker.aspx, NTLM Type-2 AD topology disclosure, custom-branding module discovery, EoL farm permanent-CVE-window exploitation, FormDigest anonymous issuance, file-extension blocklist NOT-an-oracle pattern, custom-zone Forms auth bridging on-prem AD. Use when target has SharePoint headers (SPRequestGuid, X-MS-InvokeApp, X-SharePointHealthScore, MicrosoftSharePointTeamServices) or paths (/_layouts/15/, /_vti_bin/, /_api/, /_catalogs/).
中文简介正在准备中。当前显示原文说明。
Skill-set loader for /hunt orchestrator. Fingerprints the target, picks the right platform attack skills, and loads the Red Team or WAPT skill set. Use when /hunt has just received a mode answer (redteam or wapt + blackbox|greybox) and needs to load the appropriate skills and print the taxonomy. Not for direct user invocation.
中文简介正在准备中。当前显示原文说明。
Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SAML signature stripping (Uber, Rocket.Chat, samlify CVE-2025-47949), SAML domain enforcement bypass via control characters (HackerOne 2024), partner-portal cross-IdP assertion reuse (Slack), WordPress XMLRPC bypassing SSO (Uber), JWT alg-confusion HS256/RS256 (Jitsi), JWT signature-validation skip (Linktree, Newspack), and token-audience confusion (Argo CD CVE-2023-22482). For standalone JWT signature/crypto forging (alg:none, key confusion, kid/jku) see hunt-jwt-crypto; this skill covers JWT only inside SSO/SAML/token-trust bypass chains. SAML assertion-layer attacks (XSW, comment injection, signature stripping, XXE-in-assertion) are owned by hunt-saml; this skill owns the broader cross-protocol auth-bypass taxonomy. Use when hunting auth bypass — see the Legacy-Protocol Matrix for branded-UI vs legacy-endpoint patterns.
中文简介正在准备中。当前显示原文说明。
Hunt ASP.NET-specific surface — ViewState deserialization (signed-only vs encrypted), machineKey recovery, dual-parser MAC-bypass anti-pattern, request-validator bypass, trace.axd/elmah.axd disclosure, load-balanced ViewState cross-node failures, SafeControl enumeration via reflection, customErrors mode=Off stack-trace leaks, classic Webforms .aspx/.asmx/.svc surface. Built for ASP.NET Webforms + WCF + SharePoint farms.
中文简介正在准备中。当前显示原文说明。