skills.rest
uphiago
uphiagoCOMMUNITY
Explore all skills by this author →
Website𝕏@uphiagoGitHub

zimbra-attack

Test Zimbra Collaboration Suite security vulnerabilities via SOAP enumeration and CVE-2022-37042 checks.

1.1k|191|Updated Jun 24, 2026
Search Tags:#pentest#ssrf#recon#email-security#zimbra#user-enumeration#cve-exploitation
One-click install
npx skills add https://github.com/uphiago/recon-skills --skill zimbra-attack
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: zimbra-attack
Source: https://github.com/uphiago/recon-skills/tree/main/recon/zimbra-attack
Command: npx skills add https://github.com/uphiago/recon-skills --skill zimbra-attack

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill solves the problem of manually identifying and assessing security weaknesses in Zimbra Collaboration Suite deployments, which are commonly used for email and collaboration across government, enterprise, and university environments, cutting down reconnaissance time from hours to minutes.

Core Features & Use Cases

  • Unauthenticated SOAP User Enumeration: Identify valid user accounts on Zimbra instances without credentials by analyzing SOAP API response differences for valid and invalid usernames.
  • Critical CVE Exploitation Testing: Automate checks for CVE-2022-37042 (UploadServlet path traversal) and other high-severity Zimbra vulnerabilities that enable unauthenticated remote code execution.
  • Internal SSRF and Admin Console Probing: Test for internal service access via the /service/proxy endpoint and exposed Zimbra admin consoles that could lead to full system compromise.
  • Use Case: A penetration tester assessing a government agency's webmail infrastructure can use this Skill to quickly confirm Zimbra presence, enumerate valid user accounts, and test for critical unauthenticated exploits without manual configuration.

Quick Start

Use the zimbra-attack skill to scan a target Zimbra webmail URL for user enumeration, critical CVE exploits, and internal SSRF vectors.

Frequently Asked Questions about zimbra-attack

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate valid users on a Zimbra mail server without credentials?▼

Unauthenticated SOAP user enumeration identifies valid Zimbra accounts by analyzing response differences between valid and invalid usernames via the SOAP API. This automated reconnaissance removes manual configuration, cutting user discovery time from hours to minutes.

Can I automate Zimbra CVE-2022-37042 path traversal testing during a pentest?▼

Yes, Zimbra CVE-2022-37042 path traversal testing automates checks for the UploadServlet vulnerability. This unauthenticated remote code execution flaw is tested automatically alongside other high-severity vulnerabilities to confirm exploitability without manual payload configuration.

What is the best way to test Zimbra admin console exposure and internal SSRF?▼

Testing Zimbra admin console exposure and internal SSRF probes the /service/proxy endpoint for internal service access. This identifies exposed administrative interfaces and internal network vectors that could lead to full system compromise during penetration testing.

Does Zimbra penetration testing work for government and university email environments?▼

Zimbra penetration testing applies directly to government, enterprise, and university environments using Zimbra Collaboration Suite. It assesses webmail infrastructure security by confirming Zimbra presence and executing unauthenticated exploit checks tailored to these deployment contexts.

How do I fingerprint the exact Zimbra Collaboration Suite version during reconnaissance?▼

Version fingerprinting identifies the exact Zimbra Collaboration Suite deployment version during reconnaissance. This automated detection confirms target software presence and determines vulnerability susceptibility before executing deeper CVE exploitation and SSRF probing workflows.

What are the limitations of automated Zimbra vulnerability scanning?▼

Automated Zimbra vulnerability scanning focuses strictly on unauthenticated vectors like SOAP enumeration, path traversal, and SSRF probing. It does not test authenticated vulnerabilities or business logic flaws, requiring standard command-line tools and target URL access without guaranteed exploit success.

Related Skills

Explore More Software Engineering Skills→
EntroVyxEntroVyx
3

zimbra-attack

Scan Zimbra Collaboration Suite instances for vulnerabilities and exposed endpoints.

Community
Advanced
RifteoRifteo
30

ssrf-hunter

Detect Server-Side Request Forgery vulnerabilities in web applications.

Official
Advanced
Ed1s0nZEd1s0nZ
5.6k

network-penetration-testing

Execute network penetration testing phases with Nmap, Nessus, and Metasploit.

Community
Advanced
cmndcntrlcybercmndcntrlcyber
3

security-arsenal

Provide security payloads and bypass techniques for web application penetration testing.

Community
Advanced