NetSuite is one of the worlds leading ERP systems and handles business critical data for thousands of organisations. My latest research uncovers how many of these organisations are leaking sensitive data to the public through misconfigurations in their access controls, akin to my previous research into ServiceNow and Salesforce . The significance of this is not only the nature of the data exposed,…
This research is written and discovered by Aaron Costello (Twitter @ConspiracyProof). Daniel Miessler has had absolutely no part in the research nor this article. His sole link to the research is taking statements from this very article and reposting them on Twitter. Please provide proper accreditation if choosing to share. Background and Introduction The purpose of this tutorial is to share my…
Table of Contents Introduction Prerequisites Environment Common Terminology Frequently Asked Questions Getting Familiar with Release Updates Default Owner Assignment for Records Removing Object Visibility Guest User Profile Guest User Permission Set(s) Community Settings Sharing Rules Conclusion & Takeaways Introduction Since my previous blog post, a lot has happened. The post got the attention of…
Table of Contents Introduction What is Salesforce Lightning? Creating your own Salesforce Developer (Community) Instance Key Terms How does Salesforce Lightning implement security? Objects and OLS Fields and FLS Records and RLS Caveat Apex Classes and Methods Recon Process Exploitation Workflow In Practice Pull Custom Objects Extract Data from Objects Interacting with Apex Class Methods Putting…