elasticsearch-attack
Elasticsearch unauthorized access and exploitation. Use when a target is found with ports 9200/9300 open, the Elasticsearch service has no authentication, and it is necessary to obtain index data from ES or achieve remote command execution. Covers unauthorized access, authentication bypass, index data theft, MVEL/Groovy scripts…