codingo / NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.
GNU General Public License v3.0
2.82k stars 576 forks source link

No error or warning message seen when tried to perform "NoSQL DB Access Attacks" #91

Closed kanchanswami closed 4 years ago

kanchanswami commented 4 years ago

What's the problem (or question)?

No error or warning message seen when tried to perform "NoSQL DB Access Attacks"

Through Set option, Host IP, Mongo Shell IP and TCP port listener is provides and when 2 option i.e. NOSQL DB Access Attacks is enter i.e. 2. It does not error out. It simply remove 2 and prompt is waiting for you to enter any value.

Do you have an idea for a solution?

When option "2. NoSQL DB Access Attacks" is provided it should work or if there is any mistake it should error out.

How can we reproduce the issue?

  1. Installed MongoDB and Create db instance

    show dbs use demo db.users.save( {username:"demo"} ) db.users.find() show dbs

  2. Installed NoSQLMap
  3. Run ./noSQLMap and run/selected following options 3.1 Set the target or host IP to 192.168.104.96 3.2 Set the Host IP for Mongo/Shells 192.168.104.96 3.3 Set TCP listener port 4444 3.4 Now select option 2 i.e. NoSQL DB Access Attack
  4. When you hit enter, nothing is happening. No error message or any warning message

What are the running context details?

github-actions[bot] commented 4 years ago

Stale issue message