# Exploitation

> Exploit RabbitMQ admin API to dump data and add backdoor users

- **URL:** https://hackindex.io/services/amqp/exploitation
- **Service:** [AMQP](https://hackindex.io/services/amqp.md)
- **Published:** 2026-04-04
- **Updated:** 2026-04-04

AMQP exploitation uses confirmed weaknesses to access message data, inject messages, or gain code execution on the broker. Default credentials on RabbitMQ (guest:guest) still appear in production, especially on internal networks.

Management API abuse with valid credentials lets you read and publish messages, create exchanges, and modify permissions. Message injection into queues consumed by backend services can trigger application-level vulnerabilities. RabbitMQ plugins with management access can enable code execution on the broker host itself.

## Guides

- [RabbitMQ Management API Exploitation](https://hackindex.io/services/amqp/exploitation/rabbitmq-management-api-exploitation.md)