1/ the companycloud.sharepoint.com has a lotsof important and sensitive sites inside it AdminFiles PrivateFiles

lets start with the query builder you could search for query builder and click on it and you will have access to the form interface thats you could build a query chose a list (in this case we have more than 20 list) i chosed the (User Information List) and add coulmn you want to see i chosed just for POC Name Email UserName WorkPhone and i get all users in the database (More than 7000 user) you can access to the XML result from here https://companycloud.sharepoint.com/sites/*******/items?$select=Name%2CEMail%2CUserName%2CWorkPhone&$top=10000 thats hust POC you can use any of the other 20 list other than (User Information List) and any of the columns the sharepoint has a lot of sensitive information about internal employees and infrastructure and backups and customers and users in this repport i give you just a POC of how sensitive is thats, but if a hacker have access to this sort of information be sure thats will retuen in a catastrophic impact on all the company.