From dc23660d4f261715e00f19e426e7590e980d9803 Mon Sep 17 00:00:00 2001 From: pussycat0x <65701233+pussycat0x@users.noreply.github.com> Date: Thu, 2 Feb 2023 20:31:26 +0530 Subject: [PATCH 1/4] MongoDB Information Enumeration --- network/mongodb-info-enum.yaml | 35 ++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 network/mongodb-info-enum.yaml diff --git a/network/mongodb-info-enum.yaml b/network/mongodb-info-enum.yaml new file mode 100644 index 0000000000..d8f5e46a1d --- /dev/null +++ b/network/mongodb-info-enum.yaml @@ -0,0 +1,35 @@ +id: mongodb-info-enum + +info: + name: MongoDB Information Enumeration + author: pussycat0x + severity: info + description: | + MongoDB is an open source NoSQL database management program. NoSQL is used as an alternative to traditional relational databases. + reference: + - https://nmap.org/nsedoc/scripts/mongodb-info.html + metadata: + verified: true + shodan-query: mongodb server information + tags: network,mongodb,enum +network: + - inputs: + - data: 3b0000003c300000ffffffffd40700000000000061646d696e2e24636d640000000000ffffffff14000000106275696c64696e666f000100000000 + type: hex + + host: + - "{{Hostname}}" + - "{{Host}}:27017" + read-size: 2048 + + matchers: + - type: word + part: raw + words: + - "version" + - "maxBsonObjectSize" + - "" + extractors: + - type: regex + regex: + - "([A-Za-z:0-9.]+)" \ No newline at end of file From 351c13864af366ef45b15b7ac8bb42c44cbce8b8 Mon Sep 17 00:00:00 2001 From: pussycat0x <65701233+pussycat0x@users.noreply.github.com> Date: Thu, 2 Feb 2023 20:33:56 +0530 Subject: [PATCH 2/4] condition -update --- network/mongodb-info-enum.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/network/mongodb-info-enum.yaml b/network/mongodb-info-enum.yaml index d8f5e46a1d..5b28a50a04 100644 --- a/network/mongodb-info-enum.yaml +++ b/network/mongodb-info-enum.yaml @@ -28,8 +28,8 @@ network: words: - "version" - "maxBsonObjectSize" - - "" + condition: and extractors: - type: regex regex: - - "([A-Za-z:0-9.]+)" \ No newline at end of file + - "([A-Za-z:0-9.]+)" From a32baa88d0f6df9686db83c5091e20e46aa51add Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Thu, 2 Feb 2023 22:06:25 +0530 Subject: [PATCH 3/4] moved to enumeration --- network/{ => enumeration}/mongodb-info-enum.yaml | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename network/{ => enumeration}/mongodb-info-enum.yaml (100%) diff --git a/network/mongodb-info-enum.yaml b/network/enumeration/mongodb-info-enum.yaml similarity index 100% rename from network/mongodb-info-enum.yaml rename to network/enumeration/mongodb-info-enum.yaml From 23b26ec95bab258273d027aabbeac2b2baa6aa0b Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Thu, 2 Feb 2023 23:32:24 +0530 Subject: [PATCH 4/4] fix-formatting --- network/enumeration/mongodb-info-enum.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/network/enumeration/mongodb-info-enum.yaml b/network/enumeration/mongodb-info-enum.yaml index 5b28a50a04..c8c45c7cc3 100644 --- a/network/enumeration/mongodb-info-enum.yaml +++ b/network/enumeration/mongodb-info-enum.yaml @@ -9,9 +9,10 @@ info: reference: - https://nmap.org/nsedoc/scripts/mongodb-info.html metadata: - verified: true + verified: "true" shodan-query: mongodb server information tags: network,mongodb,enum + network: - inputs: - data: 3b0000003c300000ffffffffd40700000000000061646d696e2e24636d640000000000ffffffff14000000106275696c64696e666f000100000000 @@ -29,6 +30,7 @@ network: - "version" - "maxBsonObjectSize" condition: and + extractors: - type: regex regex: