mirror of
https://github.com/shadow1ng/fscan.git
synced 2025-07-14 05:12:36 +08:00
49 lines
1.4 KiB
Go
49 lines
1.4 KiB
Go
package Plugins
|
|
|
|
import (
|
|
"../common"
|
|
"fmt"
|
|
_ "github.com/denisenkom/go-mssqldb"
|
|
"net"
|
|
"strings"
|
|
"sync"
|
|
"time"
|
|
)
|
|
|
|
|
|
func MongodbScan(info *common.HostInfo,ch chan int,wg *sync.WaitGroup) {
|
|
MongodbUnauth(info)
|
|
wg.Done()
|
|
<- ch
|
|
}
|
|
|
|
func MongodbUnauth(info *common.HostInfo) (flag bool,err error) {
|
|
flag = false
|
|
send_data := []byte{58,0,0,0,167,65,0,0,0,0,0,0,212,7,0,0,0,0,0,0,97,100,109,105,110,46,36,99,109,100,0,0,0,0,0,255,255,255,255,19,0,0,0,16,105,115,109,97,115,116,101,114,0,1,0,0,0,0}
|
|
getlog_data := []byte{72,0,0,0,2,0,0,0,0,0,0,0,212,7,0,0,0,0,0,0,97,100,109,105,110,46,36,99,109,100,0,0,0,0,0,1,0,0,0,33,0,0,0,2,103,101,116,76,111,103,0,16,0,0,0,115,116,97,114,116,117,112,87,97,114,110,105,110,103,115,0,0}
|
|
realhost:=fmt.Sprintf("%s:%d",info.Host,common.PORTList["mgo"])
|
|
conn,err := net.DialTimeout("tcp",realhost,time.Duration(info.Timeout)*time.Second)
|
|
if err != nil{return}
|
|
defer conn.Close()
|
|
conn.Write(send_data)
|
|
buf := make([]byte, 1024)
|
|
count, err := conn.Read(buf)
|
|
if err != nil {
|
|
return flag,err
|
|
}
|
|
text := string(buf[0:count])
|
|
if strings.Contains(text,"ismaster"){
|
|
conn.Write(getlog_data)
|
|
count, err := conn.Read(buf)
|
|
if err != nil {
|
|
return flag,err
|
|
}
|
|
text := string(buf[0:count])
|
|
if strings.Contains(text,"totalLinesWritten"){
|
|
flag = true
|
|
result := fmt.Sprintf("Mongodb:%v unauthorized",realhost)
|
|
common.LogSuccess(result)
|
|
}
|
|
}
|
|
return flag,err
|
|
} |