Skip to content

Offline Pentest Script 4.15.0

Choose a tag to compare

View all tags
@cjlfilm cjlfilm released this 04 Oct 18:22
· 7 commits to main since this release
4.15.0
1045ee5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

4.15.0

  • Added: nine new unauthenticated-exposure checks, all read-only, non-destructive, single-request confirmations:
    • etcd (GET /v2/keys/) — CRITICAL. Full cluster secrets/config exposure.
    • MongoDB (legacy isMaster wire-protocol handshake) — CRITICAL. Full database read/write.
    • Consul (GET /v1/status/leader) — CRITICAL. Service catalog + KV store exposure.
    • Elasticsearch (root endpoint, cluster_name/tagline check) — CRITICAL. Full index access.
    • CouchDB (GET /_all_dbs) — CRITICAL if unauthenticated, INFO if it correctly required auth.
    • RabbitMQ management API (GET /api/overview) — CRITICAL if unauthenticated, INFO if it correctly required auth.
    • ZooKeeper (ruok four-letter word) — MEDIUM. Silence is treated as inconclusive, not negative (modern ZooKeeper disables this by default).
    • Anonymous FTP login (USER anonymous / PASS) — HIGH.
    • rsync module listing (daemon protocol handshake, empty module name) — MEDIUM.
  • Ports 2181, 2379, 5984, 8500 added to the scan list (MongoDB/FTP/rsync/RabbitMQ/Elasticsearch were already scanned but unconfirmed).
  • Memcached (11211) deliberately excluded — avoids any possibility of the tool being used as a UDP amplification source.
Assets 3
Loading