Hackers of India

JMSDigger

By  Gursev Singh Kalra  on 31 Jul 2013 @ Blackhat : Arsenal

This Tool Demo covers following tools where the speaker has contributed or authored
JMSDIGGER

Abstract

JMSDigger is a new tool that can be leveraged to engage and assess enterprise messaging applications with the current release focuses on ActiveMQ. JMSDigger has following features:

Validate credentials and perform credential bruteforce
Dump destinations (topics, queues and queue browsers)
Create, dump and delete durable subscribers
Perform anonymous authentication
Password Decryption
Retrieve Statistics for Broker, Topic and Queues
Create dynamic queues and topics