snowpick

ServiceNow exposure scanner from Bishop Fox that finds misconfigured Service Portal widget ACLs and Table REST API access controls leading to unauthenticated data exposure. It obtains a session token from the public login page without credentials, probes installed widgets and default table/field pairs, and separates confirmed row exposure from count-only evidence while emitting reproduction curl commands for authorized validation.