> For the complete documentation index, see [llms.txt](https://breakpoint-journal.gitbook.io/breakpoint/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://breakpoint-journal.gitbook.io/breakpoint/windows/windows-privilege-escalation/installed-to-be-wild-privesc-paths-in-windows-apps/erlang.md).

# Erlang

Erlang is a programming language for use by distributed systems. It exports a network port that allows other Erlang nodes to join the cluster. Nodes provide a secret cookie, `.erlang.cookie`, which often has weak security. For example, RabbitMQ uses rabbit by default. Often, the cookie is placed in a config file that's not well protected in home directories, userprofiles, project files, and such. Example Erlang applications are SolarWinds, RabbitMQ, CouchDB. (2018)

* [Erlang RCE Blog Post](https://malicious.link/posts/2018/erlang-arce/)
* [RabbitMQ Cookie Documentation](https://www.rabbitmq.com/clustering.html#erlang-cookie)
* SolarWinds: `C:\ProgramData\SolarWinds\Orion\RabbitMQ\.erlang.cookie`