LeakLooker v2.0 releases: Find open databases with Shodan

by do son · May 25, 2019

LeakLooker

Find open databases with Shodan.

With LeakLooker you can find publicly open MongoDB, CouchDB and Elasticsearch database, it also includes Kibana instances. The script parses results from Shodan, excluding empty and compromised databases. Everything is sorted and presented in a clickable way.

More info, please read here.

Changelog v2.0

Download

Requirement

Python 3
Shodan paid plan, except Kibana search

Put your Shodan API key in line 65.

git clone https://github.com/woj-ciech/LeakLooker.git
pip3 install shodan
pip3 install colorama
pip3 install hurry.filesize

Usage

root@kali:~/# python leaklooker.py -h

         ,

         )\

        /  \

       '  # '

       ',  ,'

         `'

         ,

         )\

        /  \

       '  ~ '

       ',  ,'

         `'

LeakLooker - Find open databases

https://medium.com/@woj_ciech https://github.com/woj-ciech/



usage: leaklooker.py [-h] [--elastic] [--couchdb] [--mongodb] [--kibana]

                     [--first FIRST] [--last LAST]



LeakLooker



optional arguments:

  -h, --help     show this help message and exit

  --elastic      Elasti search (default: False)

  --couchdb      CouchDB (default: False)

  --mongodb      MongoDB (default: False)

  --kibana       Kibana (default: False)



Pages:

  --first FIRST  First page (default: None)

  --last LAST    Last page (default: None)

Example

root@kali:~/# python leaklooker.py --mongodb --couchdb --kibana --elastic --first 12 --last 14

[...]

----------------------------------Elastic - Page 12--------------------------------

Found 25069 results

IP: http://xxx.xxx.xxx.xxx:9200/_cat/indices?v

Size: 1G

Country: France

Indices: 

.monitoring-kibana-6-2019.01.08

[...]

----------------------------

IP: http://yyy.yyy.yyy.yyy:9200/_cat/indices?v

Size: 144G

Country: China

Indices: 

zhuanli

hx_person

[...]

----------------------------------CouchDB - Page 12--------------------------------

Found 5932 results

-----------------------------

IP: http://xxx.xxx.xxx:5984/_utils

Country: Austria

new_fron_db

test_db

-----------------------------

IP: http://yyy.yyy.yyy.yyy:5984/_utils

Country: United States

_replicator

_users

backup_20180917

backup_db

eio_local

tfa_pos

----------------------------------MongoDB - Page 12--------------------------------

Found 66680 results

IP: xxx.xxx.xxx.xxx

Size: 6G

Country: France

Database name: Warn

Size: 80M

Collections: 

Warn

system.indexes

Database name: xhprofprod

Size: 5G

Collections: 

results

system.indexes

-----------------------------

IP: yyy.yyy.yyy.yyy

Size: 544M

Country: Ukraine

Database name: local

Size: 32M

Collections: 

startup_log

Database name: ace_stat

Size: 256M

Collections: 

stat_minute

system.indexes

stat_hourly

stat_daily

[...]

Database name: ace

Size: 256M

Collections: 

usergroup

system.indexes

scheduletask

dpigroup

portforward

wlangroup

[...]

----------------------------------Kibana - Page 12--------------------------------

Found 10464 results

IP: http://xxx.xxx.xxx.xxx:5601/app/kibana#/discover?_g=()

Country: Germany

---

IP: http://yyy.yyy.yyy.yyy:5601/app/kibana#/discover?_g=()

Country: United States

---

IP: http://zzz.zzz.zzz.zzz:5601/app/kibana#/discover?_g=()

Country: United Kingdom