akde/infosec

Information security is ultimately about managing risk

4369 epmd

Erlang Port Mapper Daemon

Check if epmd is running
echo -n -e "\x00\x01\x6e" | nc -vn $target 4369
Check with nmap
nmap -sV -Pn -n -T4 -p 4369 --script epmd-info $target
Brute force the key with https://insinuator.net/2017/10/erlang-distribution-rce-and-a-cookie-bruteforcer/ and try the RCE.

You must be logged in to post a comment.

Personal collection of some infosec stuff. Primary purpose of this site is to collect and organize for myself.

Note: Some content is not publicly visible due to copyright issues. Therefore, some links could be broken.

python -c 'import pty;pty.spawn("/bin/bash")';

python3 -c 'import pty;pty.spawn("/bin/bash")';