LeakLooker
Find open databases with Shodan.
With LeakLooker you can find publicly open MongoDB, CouchDB and Elasticsearch database, it also includes Kibana instances. The script parses results from Shodan, excluding empty and compromised databases. Everything is sorted and presented in a clickable way.
More info, please read here.
Changelog v2.0
Download
Requirement
- Python 3
- Shodan paid plan, except Kibana search
Put your Shodan API key in line 65.
git clone https://github.com/woj-ciech/LeakLooker.git
pip3 install shodan
pip3 install colorama
pip3 install hurry.filesize
Usage
root@kali:~/# python leaklooker.py -h
,
)\
/ \
' # '
', ,'
`'
,
)\
/ \
' ~ '
', ,'
`'
LeakLooker - Find open databases
https://medium.com/@woj_ciech https://github.com/woj-ciech/
usage: leaklooker.py [-h] [--elastic] [--couchdb] [--mongodb] [--kibana]
[--first FIRST] [--last LAST]
LeakLooker
optional arguments:
-h, --help show this help message and exit
--elastic Elasti search (default: False)
--couchdb CouchDB (default: False)
--mongodb MongoDB (default: False)
--kibana Kibana (default: False)
Pages:
--first FIRST First page (default: None)
--last LAST Last page (default: None)
Example
root@kali:~/# python leaklooker.py --mongodb --couchdb --kibana --elastic --first 12 --last 14
[...]
----------------------------------Elastic - Page 12--------------------------------
Found 25069 results
IP: http://xxx.xxx.xxx.xxx:9200/_cat/indices?v
Size: 1G
Country: France
Indices:
.monitoring-kibana-6-2019.01.08
[...]
----------------------------
IP: http://yyy.yyy.yyy.yyy:9200/_cat/indices?v
Size: 144G
Country: China
Indices:
zhuanli
hx_person
[...]
----------------------------------CouchDB - Page 12--------------------------------
Found 5932 results
-----------------------------
IP: http://xxx.xxx.xxx:5984/_utils
Country: Austria
new_fron_db
test_db
-----------------------------
IP: http://yyy.yyy.yyy.yyy:5984/_utils
Country: United States
_replicator
_users
backup_20180917
backup_db
eio_local
tfa_pos
----------------------------------MongoDB - Page 12--------------------------------
Found 66680 results
IP: xxx.xxx.xxx.xxx
Size: 6G
Country: France
Database name: Warn
Size: 80M
Collections:
Warn
system.indexes
Database name: xhprofprod
Size: 5G
Collections:
results
system.indexes
-----------------------------
IP: yyy.yyy.yyy.yyy
Size: 544M
Country: Ukraine
Database name: local
Size: 32M
Collections:
startup_log
Database name: ace_stat
Size: 256M
Collections:
stat_minute
system.indexes
stat_hourly
stat_daily
[...]
Database name: ace
Size: 256M
Collections:
usergroup
system.indexes
scheduletask
dpigroup
portforward
wlangroup
[...]
----------------------------------Kibana - Page 12--------------------------------
Found 10464 results
IP: http://xxx.xxx.xxx.xxx:5601/app/kibana#/discover?_g=()
Country: Germany
---
IP: http://yyy.yyy.yyy.yyy:5601/app/kibana#/discover?_g=()
Country: United States
---
IP: http://zzz.zzz.zzz.zzz:5601/app/kibana#/discover?_g=()
Country: United Kingdom
Additional
Tool has been made for educational purposes only. I’m not responsible for any damage caused. Don’t be evil.
Source: https://github.com/woj-ciech/
