> For the complete documentation index, see [llms.txt](https://ppn.snovvcra.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ppn.snovvcra.sh/pentest/perimeter/1c.md).

# 1C

* <https://t.me/webpwn/280>
* <https://habr.com/ru/post/352566/>
* <https://www.rbsoft.ru/kb/upravlenie-spiskami-baz-1s/>
* <https://ardent101.github.io/posts/1c/>
* <https://www.pentestnotes.ru/notes/bitrix_pentest_full/>
* [\[PDF\] Уязвимости и атаки на CMS Bitrix (by @crlf)](https://github.com/cr1f/writeups/blob/main/attacking_bitrix.pdf)

## 1C:Enterprise

Desktop clients' DB config is stored in `C:\Users\<USERNAME>\AppData\Roaming\1C\1CEStart\ibases.v8i`:

```
Cmd > notepad.exe %APPDATA%\1C\1CEStart\ibases.v8i
PS > gc $env:APPDATA\1C\1CEStart\ibases.v8i -Encoding UTF8
```

List all users existing in a DB that is published as a web app:

```
$ curl -sSLk https://1c.megacorp.com/<DB_NAME>/en_US/e1cib/users
$ curl -sSLk https://1c.megacorp.com/<DB_NAME>/ru_RU/e1cib/users
```

## 1C-Bitrix

* <https://github.com/indigo-sadland/quick-tricks>
* <https://pentestnotes.ru/notes/bitrix_pentest_full/>

## Tools

* <https://github.com/KraudSecurity/1C-Exploit-Kit>
* <https://gist.github.com/snovvcrash/632ac474abf90216aecf01c212251cca>
* <https://github.com/durck/wb1c>