---
id: 4038
title: "XMPP: An Under-appreciated Attack Surface"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/xmpp-underappreciated-attack-surface"
published_at: "2021-12-06T00:00:00Z"
tags: ["pentesting", "attack-surface", "reconnaissance", "shodan", "misconfiguration", "xmpp"]
phying_url: "https://phying.com/item/4038"
lang: en
---

# XMPP: An Under-appreciated Attack Surface

## Summary

Why XMPP deserves more pentester attention: Shodan shows hundreds of thousands of exposed servers, and misconfigurations leak usernames, chat logs, and Pub/Sub data across industries.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2021-12-06T00:00:00Z
- **Original:** https://bishopfox.com/blog/xmpp-underappreciated-attack-surface
- **Phying News:** https://phying.com/item/4038