CVE-2018-15131 PoC — Zimbra Collaboration Suite 信息泄露漏洞

Description

Zimbra Collaboration Suite Username Enumeration 

介绍

# Zimbra Collaboration User Enumeration Script (CVE-2018-15131)

## How to use

The argument --host must be the hostname or IP address of Zimbra Collaboration Web Application root page, and --userlist an list of usernames to check against it.
```
root@kali# ./cve-2018-15131-user-enum.py --host http://mail.target.com --userlist /tmp/emails.txt
```

And it should spill out valid e-mails!

References: https://bugzilla.zimbra.com/show_bug.cgi?id=109012

文件快照

备注