{"id":2956,"date":"2021-04-22T17:28:56","date_gmt":"2021-04-22T15:28:56","guid":{"rendered":"https:\/\/andreas-klingler.de\/infosec\/?p=2956"},"modified":"2021-04-22T17:46:17","modified_gmt":"2021-04-22T15:46:17","slug":"4369-epmd","status":"publish","type":"post","link":"https:\/\/infosec.andreas-klingler.de\/?p=2956","title":{"rendered":"4369 epmd"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><em>Erlang Port Map\u00adper Daemon<\/em><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Enumeration<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Mandatory<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>Check if epmd is run\u00adning<br><code>echo -n -e \"\\x00\\x01\\x6e\" | nc -vn $target 4369<\/code><\/li><li>Check with nmap<br><code>nmap -sV -Pn -n -T4 -p 4369 --script epmd-info $target<\/code><\/li><li>Brute force the key with <a href=\"https:\/\/insinuator.net\/2017\/10\/erlang-distribution-rce-and-a-cookie-bruteforcer\/\">https:\/\/insinuator.net\/2017\/10\/erlang-distribution-rce-and-a-cookie-bruteforcer\/<\/a> and try the&nbsp;<span class=\"caps\">RCE<\/span>.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Erlang Port Map\u00adper Dae\u00admon Enu\u00admer\u00ada\u00adtion Manda\u00adto\u00adry Check if epmd is run\u00adningecho \u2011n \u2011e \u201c\\x00\\x01\\x6e\u201d | nc \u2011vn $tar\u00adget 4369 Check with nmap\u00adn\u00admap \u2011sV \u2011Pn \u2011n \u2011<span class=\"caps\">T4<\/span> \u2011p 4369 \u2013script epmd-info $tar\u00adget Brute force the key with https:\/\/insinuator.net\/2017\/10\/erlang-distribution-rce-and-a-cookie-bruteforcer\/ and try the&nbsp;<span class=\"caps\">RCE<\/span>.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wp_typography_post_enhancements_disabled":false,"footnotes":""},"categories":[36],"tags":[372,373],"class_list":["post-2956","post","type-post","status-publish","format-standard","hentry","category-port","tag-epmd","tag-erlang"],"_links":{"self":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2956","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2956"}],"version-history":[{"count":2,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2956\/revisions"}],"predecessor-version":[{"id":2958,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2956\/revisions\/2958"}],"wp:attachment":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2956"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2956"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2956"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}