Locked CVE-2018-10949 - Zimbra Collaboration User Enumeration

[TheShadowX]

Zimbra Collaboration User Enumeration Script (CVE-2018-10949)

How to use

The argument --host must be the hostname or IP address of Zimbra Collaboration Web Application root page, and --userlist an list of usernames to check against it.

 

root@kali# ./cve-2018-10949-user-enum.py --host

This is the hidden content, please

• Sign In
• or
• Sign Up

--userlist /tmp/emails.txt

And it should spill out valid e-mails!

This is the hidden content, please

• Sign In
• or
• Sign Up

Edited December 1, 2018 by TheShadowX