I work in application security and SharePoint is a new area for me to be operating in. I apologize in advance if my command of the local lingo is lacking.
I recently set up an automated scan of a relatively small SharePoint site that a developer group wanted to publish outside the company firewall. The site provides a form for employees to request PTO and an approval interface for managers. The scan was running off a web crawler and must have found its way into the _layouts folder, because the end result was that the scan actually deleted the default.aspx of the site. This was simple enough to restore, and indicative of a major security in and of itself as the scan was running as an unprivileged user.
I'm now trying to build better testing procedures that will avoid some headaches down the road. What control directories and paths should I be aware of and check manually prior to unleashing a web crawler / input fuzzer on a SharePoint site? Are there any other things I should be aware of before targeting a SharePoint site with automated scanning?