Home
Softono

Nosql Exploitation Framework

Open source BSD-3-Clause Python
GitHub
604
Stars
143
Forks
70
Issues
25
Watchers
1 year
Last Commit
Vulnerability Scanning

 About Nosql Exploitation Framework

A Python Framework For NoSQL Scanning and Exploitation

Platforms

Web Self-hosted

Languages

Python

Links

Source Code

Need Help Installing Nosql Exploitation Framework?

We provide expert installation service for this software. Our team will install, configure, and secure Nosql Exploitation Framework on your server. plans start at just $30.

Hire an Expert

Alternatives to Nosql Exploitation Framework

View All

NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

3.3K

Mongoaudit

🔥 A powerful MongoDB auditing and pentesting tool 🔥

1.3K

Nosqli

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

408

Nosql MongoDB Injection Username Password Enumeration

Using this script, you can enumerate Usernames and passwords of Nosql(mongodb) injecion vulnerable web applications.

174

NoSQL Attack Suite

A couple of different scripts, made to automate attacks against NoSQL databases.

66
Published by
torque59
Visit View Profile

Nosql Exploitation Framework

View on GitHub

Baikal Requirements Status

Nosql-Exploitation-Framework

A FrameWork For NoSQL Scanning and Exploitation Framework

NoSQL Exploitation Framework 2.02b Released

Author

  • NoSQL Exploitation Framework Authored By Francis Alexander

Wiki

Features:

  • First Ever Tool With Added Support For Mongo,Couch,Redis,H-Base,Cassandra
  • Support For NoSQL WebAPPS
  • Added payload list for JS Injection,Web application Enumeration.
  • Scan Support for Mongo,CouchDB and Redis
  • Dictionary Attack Support for Mongo,Couch and Redis
  • Enumeration Module added for the DB's,retrieves data in db's @ one shot.
  • Currently Discover's Web Interface for Mongo
  • Shodan Query Feature
  • MultiThreaded IP List Scanner
  • Dump and Copy Database features Added for CouchDB
  • Sniff for Mongo,Couch and Redis

Change Log V2.02b:

  • The framework has been updated and moved to python3
  • Added Dockerfile
  • Bug fixes

Installation

  • Install Pip, sudo apt-get install python-setuptools;easy_install pip
  • pip install -r requirements.txt
  • python nosqlframework.py -h (For Help Options)

Installation (Docker)

  • docker build -t torque59/nosqlframework . OR docker pull torque59/nosqlframework
  • docker run -it torque59/nosqlframework --help
  • docker run -it torque59/nosqlframework -ip ip_Addr -enum mongo

Installation on Mac/Kali

  • Removed the scapy module by default for mac. So this should run by default. If you need to sniff run the script and then continue.
  • Run installformac-kali.sh directly
  • python nosqlframework.py -h (For Help Options)

Installing Nosql Exploitaiton Framework in Virtualenv

  • virtualenv nosqlframework
  • source nosqlframework/bin/activate
  • pip install -r requirements.txt
  • nosqlframework/bin/python nosqlframework.py -h (For Help Options)
  • deactivate (After usage)

Contribution

  • It would be great seeing this project grow , do contribute by issuing a pull request.

Sample Usage

  • nosqlframework.py -ip localhost -scan
  • nosqlframework.py -ip localhost -dict mongo -file b.txt
  • nosqlframework.py -ip localhost -enum couch
  • nosqlframework.py -ip localhost -enum redis
  • nosqlframework.py -ip localhost -clone couch

Sample Output

Future Releases

  • Improved Web App Detection
  • Support for Neo4j on the way
  • Web Interface attack and Fuzz Platform

Bugs or Queries