neo4j-browser: Neo4j Browser - Detect

2025-08-01 neo4j-browser PoC Public

Description

The Neo4j Browser has been detected.

CVE-2021-34371 -> Neo4j 3.4及之前的版本存在远程代码执行漏洞。该漏洞源于Neo4j 3.5之前的版本依赖于一个存在远程代码执行漏洞的库(rhino 1.7.9)。当shell服务器开启时，攻击者可通过构造和序列化恶意的Java对象，从shell服务器实现远程代码执行。

fofa: title="Neo4j Browser"

shodan: http.title:"Neo4j Browser"

PoC

id: neo4j-browser

info:
  name: Neo4j Browser - Detect
  author: DhiyaneshDK
  severity: info
  verified: true
  description: |-
    The Neo4j Browser has been detected.
    CVE-2021-34371 -> Neo4j 3.4及之前的版本存在远程代码执行漏洞。该漏洞源于Neo4j 3.5之前的版本依赖于一个存在远程代码执行漏洞的库(rhino 1.7.9)。当shell服务器开启时，攻击者可通过构造和序列化恶意的Java对象，从shell服务器实现远程代码执行。
    fofa: title="Neo4j Browser"
    shodan: http.title:"Neo4j Browser"
  tags: neo4j,exposure,unauth,panel
  created: 2023/12/20

rules:
  r0:
    request:
      method: GET
      path: /browser
      follow_redirects: true
    expression: response.status == 200 && response.body.ibcontains(b'<title>Neo4j Browser</title>')
expression: r0()

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/fingerprinting/neo4j-browser.yaml

References

Related Vulnerabilities