1C

• https://t.me/webpwn/280

• https://habr.com/ru/post/352566/

• https://www.rbsoft.ru/kb/upravlenie-spiskami-baz-1s/

• https://ardent101.github.io/posts/1c/

• https://www.pentestnotes.ru/notes/bitrix_pentest_full/

• [PDF] Уязвимости и атаки на CMS Bitrix (by @crlf)

1C:Enterprise

Desktop clients' DB config is stored in C:\Users\<USERNAME>\AppData\Roaming\1C\1CEStart\ibases.v8i:

Cmd > notepad.exe %APPDATA%\1C\1CEStart\ibases.v8i
PS > gc $env:APPDATA\1C\1CEStart\ibases.v8i -Encoding UTF8

List all users existing in a DB that is published as a web app:

$ curl -sSLk https://1c.megacorp.com/<DB_NAME>/en_US/e1cib/users
$ curl -sSLk https://1c.megacorp.com/<DB_NAME>/ru_RU/e1cib/users

1C-Bitrix

• https://github.com/indigo-sadland/quick-tricks

• https://pentestnotes.ru/notes/bitrix_pentest_full/

Tools

• https://github.com/KraudSecurity/1C-Exploit-Kit

• https://gist.github.com/snovvcrash/632ac474abf90216aecf01c212251cca

• https://github.com/durck/wb1c