Information Disclosure in Hitachi Vantara Pentaho Access Control

This repository is a small Python proof-of-concept named PWNentaho targeting Pentaho authentication bypass associated with CVE-2021-31602. It contains three files: a minimal README, a plaintext endpoint wordlist, and the main Python script. The core logic is in main.py, which prompts the operator for a target base URL, prepends http:// if no scheme is supplied, creates a local outputs directory, reads endpoint paths from endpoints.txt, and iterates through them with a progress bar. For most endpoints it issues unauthenticated GET requests to target/<endpoint>?require-cfg.js; for endpoints already containing a query string it instead sends POST requests directly to target/<endpoint>. Successful responses are written to per-endpoint text files in outputs/. Timeout and HTTP errors are silently ignored, making the tool suited for bulk probing rather than precise validation. The exploit capability is primarily unauthorized information access and endpoint enumeration rather than code execution or persistence. The endpoint list focuses on Pentaho administrative and informational APIs, including version, authorization, user/role enumeration, scheduler state, repository permissions, session details, mantle admin content, and a datasource management WSDL. Overall, this is an operationally simple web-targeted reconnaissance/exploitation helper for harvesting data from exposed Pentaho endpoints under an authentication bypass condition.