8086 InfluxDB

⇒ User Enumeration $ http://127.0.0.1:8086/debug/requests

⇒ Usage $curl-G"http://10.10.10.10:8086/query?pretty=true"-H"Authorization:Bearer<JWT>"--data-urlencode"q=showdatabases"$ curl -G “http://10.10.10.10:8086/query?pretty=true” -H “Authorization: Bearer ” —data-urlencode “db=database” —data-urlencode “q=select * from “tables"" $ curl -G “http://10.10.133.227:8086/query?pretty=true” -H “Authorization: Bearer ” —data-urlencode “db=database” —data-urlencode “q=select * from times” —data-urlencode “epoch=s”

⇒ Commands $showdatabases$ show measurements $showusers$ select * from tables

⇒ References $https://www.komodosec.com/post/when-all-else-fails-find-a-0-day$ https://docs.influxdata.com/influxdb/v1.8/administration/authentication_and_authorization/