Skip to content

AMQP:

Enumeration

Fingerprint brokers, find management ports, test credentials and permission

3 guides • Created Feb 7, 2026 • Updated Mar 29, 2026

AMQP enumeration maps the broker's configuration: queues, exchanges, bindings, users, vhosts, and access policies. RabbitMQ is the most common target, exposing both the AMQP protocol and an HTTP management API.

Queue listing reveals message flows and potentially sensitive routing keys. Exchange discovery shows how messages are distributed. User enumeration through the management API identifies accounts and their permissions across vhosts. Vhost mapping uncovers isolated environments that may have weaker access controls.