Unauthorized-zookeeper

[h1thub]

Is there an existing template for this?

• I have searched the existing templates.

Template requests

The existing exposed-zookeeper.yaml PoC only uses Zookeeper's four-letter commands to verify the existence of the vulnerability. However, this approach has a significant limitation: if the target Zookeeper instance employs a whitelist to restrict certain four-letter commands, it may lead to a situation where the unauthorized access vulnerability actually exists, but is not detected. Therefore, we are modifying the new PoC as follows, with the relevant details provided below.

https://github.com/h1thub/Unauthorized-zookeeper

Anything else?

No response

[ritikchaddha]

Hello @h1thub, thank you for your help in updating the template. We will review it and update you shortly.