-
A Message broker, written in Erlang. Uses the Erlang Cowboy webserver. Notes Default credentials: guest / guest (works per defalt only from localhost) Username can be changed without the old password on the command line?!rabbitmqctl change_password username newpassword Files with suffix .DCD contain credentials. If you have the Erlang cookie:erl -cookie JPCGJCAEWHPKKPBXBYYB -name rabbit -sname…
-
Erlang Port Mapper Daemon Enumeration Mandatory Check if epmd is runningecho -n -e "\x00\x01\x6e" | nc -vn $target 4369 Check with nmapnmap -sV -Pn -n -T4 -p 4369 --script epmd-info $target Brute force the key with https://insinuator.net/2017/10/erlang-distribution-rce-and-a-cookie-bruteforcer/ and try the RCE.