[Windows 8 General] JustinAngel:
hi folks,

Looking into the Windows 8 registry searching for loose endpoints I came across the Live Passport storage endpoints. These are most likely the endpoints used by both the Windows 8 start screen, Windows 8 control panel, Immersive browser and All Windows 8 apps and everything that's user cloud storage based.

1) All endpoints: [HKEY_USERS\S-1-5-21-<redacted>\Software\Microsoft\Windows\CurrentVersion\Live\Roaming\PolicyDocument\PolicyValues]

"WindowsSettingsURI"="https://sn2.storage.msn.com/mydata/windows/settingunitcollections"

"UserTileSubscriptionURI"="https://sn2.storage.msn.com/mydata/myprofile/expressionprofile?NotificationSubscriptions"

"RegisterCollectionInterestURI"="https://sn2.settings.live.net/mydata/windows/settingunitcollections?CollectionInterest"

"DeviceTrustChangeSubscriptionURI"="https://sn2.settings.live.net/mydata/windows/settingunitcollections_devices?NotificationSubscriptions"

"PostUserTileURI"="https://sn2.storage.msn.com/mydata/myprofile/expressionprofile"

"GetUserTileURI"="https://sn2.storage.msn.com/mydata/myprofile/expressionprofile/profilephoto"

"DeviceCountURI"="https://sn2.settings.live.net/mydata/windows/settingunitcollections?CollectionInterest.Count"

"WindowsSettingsSubscriptionURI"="https://sn2.storage.msn.com/mydata/windows/settingunitcollections?NotificationSubscriptions"

"DeviceCountSubscriptionURI"="https://sn2.settings.live.net/mydata/windows/settingunitcollections_devices?NotificationSubscriptions"

How to use these endpoints?

Make sure you're logged into http://Live.com and the endpoints come to life.

2) PostUserTileURI, User Details - Presumably used for the Windows 8 Start Menu.

Visiting https://sn2.storage.msn.com/mydata/myprofile/expressionprofile will provide you with general details XML on Live users, such as name and last status.

3) GetUserTileURI, User photo

Visiting https://sn2.storage.msn.com/mydata/myprofile/expressionprofile/profilephoto will start downloading the user image.

4) DeviceCountSubscriptionURI, all installed apps and potential saved settings

Visiting https://sn2.settings.live.net/mydata/windows/settingunitcollections_devices will provide you with a list of all devices associated to that account. Visiting https://sn2.settings.live.net/mydata/windows/settingunitcollections_devices/{Items.Document.RelationshipName} will contain an XML file listing out all possible setting containers. Such as Apps, Windows 8 settings, browser settings, etc.

5) The motherload, WindowsSettingsURI: All user settings containers

Visiting https://sn2.storage.msn.com/mydata/windows/settingunitcollections will provide you with a list of "folders" in the user settings.

Visiting https://sn2.storage.msn.com/mydata/windows/settingunitcollections/{Folder.RelationshipName} will provide a list of documents in each folder.

Visiting https://sn2.storage.msn.com/mydata/windows/settingunitcollections/{Folder.RelationshipName}/{Document.RelationshipName} will download a local settings document. However the document is either encrypted or encoded and I haven't figured out how to switch it back into clear text. yet.

Feel free to explore all endpoints or to better interpret the endpoints I've shared here.

Sincerely,

-- Justin Angel