domains / families / security / zimbra-attack

zimbra-attack

separate

Zimbra SOAP user enum, CVE-2022-37042, SSRF when webmail.

When to use

• Target has `webmail.`, `mail.`, or `zimbra.` subdomains.
• Redirect to `/zimbra/` path on mail server.
• Server header or page title contains "Zimbra".
• After `subdomain-enumeration` discovers webmail hosts.
• Government, university, or enterprise targets (Zimbra is common in these sectors).

Skill page

Source