Zabbix

Zabbix is an open-source monitoring platform used to track the health and performance of infrastructure components such as networks, servers, and applications. It follows a client-server model, with agents or SNMP endpoints reporting to a central server over TCP ports 10050 (passive) and 10051 (active). Data is visualized through a web frontend with dashboards, triggers, and alerts, supporting both passive and active checks, script execution, and integrations. In internal environments, Zabbix is often misconfigured or left with default credentials.

# Default credentials
$ uv run creds search Zabbix
+--------------+----------+----------+
| Product      | username | password |
+--------------+----------+----------+
| zabbix (web) |  Admin   |  zabbix  |
+--------------+----------+----------+

Access to its web UI—especially with admin privileges—can enable RCE through monitored items or automation features, making it a reliable pivot point during post-exploitation and lateral movement.

Last updated

Was this helpful?