Nosql Exploitation Framework: FrameWork For NoSQL Scanning and Exploitation Framework

by do son · Published June 28, 2017 · Updated August 1, 2017

Nosql Exploitation Framework is a FrameWork For NoSQL Scanning and Exploitation Framework.

Feature:

First Ever Tool With Added Support For Mongo,Couch,Redis,H-Base,Cassandra
Support For NoSQL WebAPPS
Added payload list for JS Injection,Web application Enumeration.
Scan Support for Mongo,CouchDB and Redis
Dictionary Attack Support for Mongo,Cocuh and Redis
Enumeration Module added for the DB’s,retrieves data in db’s @ one shot.
Currently Discover’s Web Interface for Mongo
Shodan Query Feature
MultiThreaded IP List Scanner
Dump and Copy Database features Added for CouchDB
Sniff for Mongo,Couch and Redis

Installation

Install Pip, sudo apt-get install python-setuptools;easy_install pip

git clone https://github.com/torque59/Nosql-Exploitation-Framework.git

pip install -r requirements.txt

python nosqlframework.py -h (For Help Options)

Installation on Mac/Kali



Run installformac-kali.sh directly

python nosqlframework.py -h (For Help Options)



Installing Nosql Exploitaiton Framework in Virtualenv



virtualenv nosqlframework

source nosqlframework/bin/activate

pip install -r requirements.txt

nosqlframework/bin/python nosqlframework.py -h (For Help Options)

deactivate (After usage)

Usage

nosqlframework.py -ip localhost -scan

nosqlframework.py -ip localhost -dict mongo -file b.txt

nosqlframework.py -ip localhost -enum couch

nosqlframework.py -ip localhost -enum redis

nosqlframework.py -ip localhost -clone couch

Source: Github

Nosql Exploitation Framework: FrameWork For NoSQL Scanning and Exploitation Framework

Search

Brilliantly

Content & Links