diff --git a/documentation/modules/auxiliary/scanner/misc/ibm_mq_enum.md b/documentation/modules/auxiliary/scanner/misc/ibm_mq_enum.md new file mode 100644 index 0000000000..30786fcc57 --- /dev/null +++ b/documentation/modules/auxiliary/scanner/misc/ibm_mq_enum.md @@ -0,0 +1,26 @@ +## Vulnerable Application + * IBM Downloads page: https://developer.ibm.com/messaging/mq-downloads/ + * Tested on IBM MQ 7.5, 8 and 9 + * Usage: + * Download and install MQ Server + * Create a new Queue Manager + * Create a new channel (without SSL) + * Run the module + +## Verification Steps + Example steps in this format (is also in the PR): + 1. Install IBM MQ Server 7.5, 8, or 9 + 2. Start msfconsole + 3. Do: ```use auxiliary/scanner/misc/ibm_mq_enum``` + 4. Do: ```set channel ``` + 5. Do: ```set rhosts ``` + 6. Do: ```set rport ``` + 7. Do: ```run``` + +## Options + **The CHANNEL option** + + This option should contain the name of a valid MQ channel. This can be obtained using the module ```auxiliary/scanner/misc/ibm_mq_channel_brute``` + +## Scenarios + This module can be used to obtain the Queue Manager name as well as the version of the MQ being used on the target host. When the Queue Manager name and a valid MQI channel name without SSL is known , the module ```auxiliary/scanner/misc/ibm_mq_login``` can be used to identify usernames that can authenticate to the Queue Manager.