domains / families / security / unauthorized-access-common-services

unauthorized-access-common-services

separate

Unauthorized access playbook for common exposed services. Use when Redis, Rsync, PHP-FPM, AJP/Ghostcat, Hadoop YARN, H2 Console, or similar management interfaces are exposed without authentication.

When to use

• Redis write-to-RCE
• Rsync data theft
• PHP-FPM code execution
• Ghostcat AJP file read
• Hadoop YARN job submission
• H2 Console JNDI
• Port scanning for common services
• Exploiting unauthenticated management services

When not to use

• Web application vulnerabilities
• Layer 2/3 attacks
• SSRF exploitation
• JNDI injection
• Deserialization attacks
• Reverse shell techniques

Skill page

Source