CVE-2022-23779

This repository provides a writeup and proof-of-concept for CVE-2022-23779, an internal hostname disclosure vulnerability in Zoho products. The exploit involves sending a curl request to a specific endpoint and analyzing the HTTP redirect response header to disclose internal hostnames.

This PoC exploits an information disclosure vulnerability in Zoho ManageEngine Desktop Central by sending an HTTP GET request to '/themes' on port 8020 and extracting the internal hostname from the 'Location' header in the redirect response.

This repository provides a detailed writeup and proof-of-concept for CVE-2022-23779, an information disclosure vulnerability in Zoho ManageEngine Desktop Central. The vulnerability allows unauthorized users to leak internal server hostnames via HTTP redirect headers.