Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Apache NiFi login scanner module #18028

Merged
merged 4 commits into from May 31, 2023
Merged

Conversation

h00die
Copy link
Contributor

@h00die h00die commented May 25, 2023

This PR adds a module to brute force apache nifi logins.

Verification

  • Install docker image, see command in docs to pull the generated username/password combo
  • Start msfconsole
  • use auxiliary/scanner/http/apache_nifi_login
  • set rhosts [ip]
  • set username [username]
  • set password [password]
  • run
  • Verify it detects invalid logins
  • Verify it detects valid logins
  • Verify (version 1.13.0 by default) it detects when there is no login
  • Document looks good

@gwillcox-r7 gwillcox-r7 self-assigned this May 30, 2023
@gwillcox-r7
Copy link
Contributor

Everything looks good now so will land this once tests pass.

@gwillcox-r7 gwillcox-r7 added the rn-modules release notes for new or majorly enhanced modules label May 31, 2023
@gwillcox-r7 gwillcox-r7 changed the title apache nifi login module Add Apache NiFi login scanner module May 31, 2023
@gwillcox-r7 gwillcox-r7 merged commit 6756047 into rapid7:master May 31, 2023
31 checks passed
@gwillcox-r7
Copy link
Contributor

Release Notes

A new scanner module has been added to scan for valid logins for Apache NiFi servers.

@h00die h00die deleted the nifi_login branch May 31, 2023 19:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docs module rn-modules release notes for new or majorly enhanced modules
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

None yet

2 participants