Skip to content
/ arbimz Public

🔥 Arbimz is a python tool created to exploit the vulnerability on Zimbra assigned as CVE-2019-9670.

License

Notifications You must be signed in to change notification settings

oppsec/arbimz

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

16 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

🕵️ Arbimz

🕵️ XXE in Zimbra Collaboration 8.7.X < 8.7.11p10




🕵️ What is Arbimz?

🕵️ Arbimz is a python tool created to exploit the vulnerability defined as CVE-2019-9670 (XXE in Zimbra Collaboration 8.7.X < 8.7.11p10)


⚡ Installing / Getting started

A quick guide of how to install and use Arbimz.

1. Clone the repository with git clone https://github.com/oppsec/arbimz.git
2. Install the libraries with pip3 install -r requirements.txt
3. Execute Arbimz with: python3 main.py --url https://example.com/



⚙️ Pre-requisites

  • Python 3 installed on your machine.
  • Install the libraries with pip3 install -r requirements.txt



✨ Features

  • Fast scan & exploiter
  • Low RAM and CPU usage
  • Auto webshell upload
  • Upload error handler



🔨 Contributing

A quick guide of how to contribute with the project.

1. Create a fork from Arbimz repository.
2. Download the project with git clone https://github.com/your/arbimz.git
3. cd arbimz/
4. Make your changes.
5. Commit and make a git push.
6. Open a pull request.



⚠️ Warning

  • The developer is not responsible for any malicious use of this tool.