Posts

Showing posts with the label MongoDB

Leaklooker - Discovery Opened Upward Databases Alongside Shodan

Image
Find opened upward databases alongside Shodan Background: https://medium.com/@woj_ciech/leaklooker-find-open-databases-in-a-second-9da4249c8472 Requirements: Python 3 Shodan paid plan, except Kibana search Put your Shodan API cardinal inwards business 65 pip3 install shodan pip3 install colorama pip3 install hurry.filesize Usage root@kali: /# python leaklooker.py -h , )\ / \ ' # ' ', ,' `' , )\ / \ ' ' ', ,' `' LeakLooker - Find opened upward databases https://medium.com/@woj_ciech https://github.com/woj-ciech/ usage: leaklooker.py [-h] [--elastic] [--couchdb] [--mongodb] [--kibana] [--first FIRST] [--last LAST] LeakLooker optional arguments: -h, --help exhibit this aid message together with instruct out --elastic Elasti search (default: False) --couchdb CouchDB (default: False) --...

Mongobuster - Hunt Opened Upward Mongodb Instances

Image
Hunt Open MongoDB instances! Features Worlds fastest too virtually efficient scanner ( Uses Masscan ). Scans entire cyberspace past times default, So burn downward the tool too chill. Hyper efficient - Uses Go-routines which are fifty-fifty lighter than threads. Pre-Requisites - Go linguistic communication ( sudo apt install golang ) Masscan ( sudo apt install masscan ) Tested on Ubuntu & Kali linux How to install too run - git clone https://github.com/yashpl/mongoBuster.git cd mongoBuster larn laid upwards mongobuster.go utils.go sudo ./mongobuster Note: Run it amongst sudo every bit Masscan requires sudo access. Flags - Flag Description --max-rate= (int) Defines maximum charge per unit of measurement at which packets are generated too sent. Default is 100. --out-file= (string) Name of file to which vulnerable IPs volition last exported. -v Display fault msgs from non-vulnerable servers NOTE - Using ridiculous values fo...

Whatweb V0.5.0 - Side Past Times Side Generation Spider Web Scanner

Image
Developed yesteryear Andrew Horton urbanadventurer together with Brendan Coles bcoles Latest Release: v0.5.0. June 9th, 2019 License: GPLv2 This production is champaign of written report to the damage detailed inward the license agreement. For to a greater extent than information nearly WhatWeb visit: Homepage: https://www.morningstarsecurity.com/research/whatweb Wiki: https://github.com/urbanadventurer/WhatWeb/wiki/ If you lot convey whatever questions, comments or concerns regarding WhatWeb, delight consult the documentation prior to contacting 1 of the developers. Your feedback is e'er welcome. About WhatWeb WhatWeb identifies websites. Its finish is to answer the question, "What is that Website?". WhatWeb recognises spider web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, spider web servers, together with embedded devices. WhatWeb has over 1800 plugins, each to recognise ...