🕵️ XXE in Zimbra Collaboration 8.7.X < 8.7.11p10

🕵️ Arbimz is a python tool created to exploit the vulnerability defined as CVE-2019-9670 (XXE in Zimbra Collaboration 8.7.X < 8.7.11p10)

A quick guide of how to install and use Arbimz.

1. Clone the repository with git clone https://github.com/oppsec/arbimz.git
2. Install the libraries with pip3 install -r requirements.txt
3. Execute Arbimz with: python3 main.py --url https://example.com/

• Python 3 installed on your machine.
• Install the libraries with pip3 install -r requirements.txt

• Fast scan & exploiter
• Low RAM and CPU usage
• Auto webshell upload
• Upload error handler

A quick guide of how to contribute with the project.

1. Create a fork from Arbimz repository.
2. Download the project with git clone https://github.com/your/arbimz.git
3. cd arbimz/
4. Make your changes.
5. Commit and make a git push.
6. Open a pull request.

• The developer is not responsible for any malicious use of this tool.