Sharepoint

Good reference:

The Lone SharepointCrummie5

Tales of sharepoint API misconfigurationsMedium

# 1. Fuzz exposed endpoints 
# 2. Analyze misconfigs to gain auth access
# 3. Check the list of latest RCEs