Default SharePoint 2013 / 2010 System Pages: Where you should take care when you go online
There are lists of SharePoint System Pages which inherit view permissions by default. If you are going to make a public SharePoint site, you might not want to access these pages by anonymous users or by Form Based Authentication User.
There are may ways to restrict a user's access to these pages that will be explained in a different post.
Below are pages that are available in each site under layout mapping.
Site Collection and Site Level Recycle Bin URLs
/_layouts/15/AdminRecycleBin.aspx
/_layouts/15/RecycleBin.aspx
https://lh6.googleusercontent.com/KCIbwwC3Qw7WRoLxSHK9EIl9G7LmM6RreTh3CWo8XXdmQQ4nPxJBNpl5tjXza6z-YoGTJ9q5p6F7XtzqKXgylplMyVAorWLmVsInctFyE7DBjgM7wWBKj_U2gmvS8ybQsIXNy1_AqwzvKAxDew
User, User Info, Site Permission related URLs
_layouts/15/permsetup.aspx
This is used to create default groups in SharePoint such as visitors, members and owners.
/_layouts/15/people.aspx?MembershipGroupId=0
All People URL
This can be even used to delete users from the site collection.
User Information Hidden List URLs
/_catalogs/users/detail.aspx
/_catalogs/users/simple.aspx
These lists are actually available from previous version of SharePoint. These are hidden lists available in the SharePoint containing user information.
/_layouts/15/userdisp.aspx?id={UserID}&Force=True
This is used to view user information in the same page without redirecting to my site.
/_layouts/quiklnch.aspx
This is used to manage quick launch items in SharePoint.
/_layouts/15/AreaNavigationSettings.aspx
This is used to modify navigation setting in the site collection.
Workflow history hidden list
/Lists/Workflow%20History/AllItems.aspx
This is hidden list for manage and view workflow history items.
Site usage page
/_layouts/15/usage.aspx
This is used to view the usage information but nothing harmful.
Site content and structure pages
/_layouts/15/sitemanager.aspx
This will bring you site management page which is available from SharePoint 2007.
/_layouts/vsubwebs.aspx
List of hierarchy pages
/_layouts/15/settings.aspx
This is the site setting page that contains all administrative links.
https://lh4.googleusercontent.com/crHhor6nUM2eroJ_QTbWg0gqPeHbSjuLJdPKfTz7Jbx2_e-5Tga0spBmWvwwJ4oMpxYs97CelYjO4wLlI0mu2RzGOpcLmjOibSnztcVXLhX371SUCHXArRmmBMeFIT8lef-MeJPG3OVs83J_fQ
/_layouts/15/viewlsts.aspx
This is used to view all site contents. List’s visibility if this page can be hidden using SharePoint designer.
https://lh5.googleusercontent.com/f7yRbKMhV3wQTA4FBpjqyD8ZOHsifDKR13DAwGZM3gqwyo0zbSnxLmWh1G1LxxcYQHk05foX0E9n5OKOP4IbtWp5sJ5F0n0euRbzloYCC9sERTalmQazO3RqO8Gs5mg8zgL0KpVujJ0QD-LAoA
Site and Site Collection feature management links
/_layouts/15/ManageFeatures.aspx
/_layouts/15/ManageFeatures.aspx?Scope=Site
These links are used activate and deactivate features in site and site collection.
SharePoint Designer Settings
/_layouts/15/SharePointDesignerSettings.aspx
This is used to enable and disable SharePoint designer settings.
Look and Feel URLs
/_layouts/ChangeSiteMasterPage.aspx
**
**This is used to change site collection master pages.
https://lh3.googleusercontent.com/-md6sMvvMecR9DJCBnypYi9nQ_S_Rn8gOuk39t5uj6sKOMfcZ9XdHWRoNJlyCrrxiYqy_URJh5IgYacZsvxLXGXI9FGgQvMJuVnM8yJGUa0q22rEr3LEruu45Ru5ASlHo04k2K67sQY4p3RDzQ
/_Layouts/AreaTemplateSettings.aspx
This is where a user can change Page Layouts, Site Templates and other related settings.
https://lh5.googleusercontent.com/RIHcfZ9zqTY5Hw5AkEAIlLIzinrjaLN6lWPtuOFpR2-qwxEYbJRsc3fPsAH5VmeDLRYtXnKHZDR07YjXpUojrkB0yhadeelHT1mfCuBKeWtaRKOpWxODn0vZ3KSmSOeYTGYrkgWPpr_ZrQU_fg
/_catalogs/masterpage/Forms/AllItems.aspx
This is the main document library for update and maintain related files and master pages.