mirror of
https://github.com/HackTricks-wiki/hacktricks-cloud.git
synced 2025-12-29 14:13:20 -08:00
27 lines
762 B
Markdown
27 lines
762 B
Markdown
# AWS - MQ Unauthenticated Enum
|
||
|
||
{{#include ../../../banners/hacktricks-training.md}}
|
||
|
||
## Public Port
|
||
|
||
### **RabbitMQ**
|
||
|
||
In case of **RabbitMQ**, by **default public access** and ssl are enabled. But you need **credentials** to access (`amqps://.mq.us-east-1.amazonaws.com:5671`). Moreover, it's possible to **access the web management console** if you know the credentials in `https://b-<uuid>.mq.us-east-1.amazonaws.com/`
|
||
|
||
### ActiveMQ
|
||
|
||
In case of **ActiveMQ**, by default public access and ssl are enabled, but you need credentials to access.
|
||
|
||
### Public URL template
|
||
|
||
```
|
||
https://b-{random_id}-{1,2}.mq.{region}.amazonaws.com:8162/
|
||
ssl://b-{random_id}-{1,2}.mq.{region}.amazonaws.com:61617
|
||
```
|
||
|
||
{{#include ../../../banners/hacktricks-training.md}}
|
||
|
||
|
||
|
||
|