- https://t.me/webpwn/280
- https://habr.com/ru/post/352566/
- https://github.com/KraudSecurity/1C-Exploit-Kit
- https://www.rbsoft.ru/kb/upravlenie-spiskami-baz-1s/
List all users if it's not disabled:
$ curl https://<HOSTNAME>/<DB_NAME>/en_US/e1cib/users
$ curl https://<HOSTNAME>/<DB_NAME>/ru_RU/e1cib/users