ElasticSearch

Requirements: Step 1: Install Java JDK 17 Elasticsearch is a Java application and requires a Java Development Kit (JDK) to run. On your Windows Server 2019 VM, open the Edge browser you installed. Search for “OpenJDK 17 download/jdk 17 install” (Microsoft, Oracle, Red Hat etc are all good providers). Download the Windows x64 JDK as a .zip file (not the JRE). Once downloaded, extract the .zip file to a simple, permanent location, such as C:\Program Files\Java\jdk-17. Step 2: Set the JAVA_HOME Environment Variable This tells Windows where to find the Java installation. ...

Through the previous misconfigs, i should have full access to the elastic search database. Let’s see and exploit: Reconnaissance of the database: curl -X GET "http://192.168.83.140:9200" curl -X GET "http://192.168.83.140:9200/_cat/indices?v" _cat/indices: This is the API command to list all indices. ?v: This makes the output “verbose” (shows headers), so it’s easy to read. Why it’s dangerous: This tells the attacker the names of all your databases, such as prod-users or customer-logs. EXPLANATION OF THE INFO GATHERED FROM THE FIRST COMMAND: "name" : "DC1" ...