> For the complete documentation index, see [llms.txt](https://notes.m4lwhere.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.m4lwhere.org/cloud/saas-attacks.md).

# SaaS Attacks

Software as a Service is used to provide a specific application to a customer. This includes Office 365, Gmail, and Salesforce. 

Data is the goal of SaaS testing. Generally this is user login information. We cannot launch exploits on the underlying infrastructure, this would be OOS.