Skip to content
Projects

torque59/Nosql-Exploitation-Framework

View on GitHub

torque59/Nosql-Exploitation-Framework has 605 GitHub stars and 140 forks. GitHot measured 0 stars in 24 hours. Last checked 2026-11-15 06:31 UTC. Last push 2024-12-06.

How these counts are measured

605 stars140 Forks

What you can do

  • First Ever Tool With Added Support For Mongo,Couch,Redis,H-Base,Cassandra
  • Support For NoSQL WebAPPS
  • Added payload list for JS Injection,Web application Enumeration.
  • Scan Support for Mongo,CouchDB and Redis

Measured star growth

in 24h
0
in 7 days
Collecting history
in 15 days
Collecting history
in 1 month
Collecting history

Net star changes over overlapping periods, not daily totals. Missing measurements are left blank. Stars measure attention, not software quality.

About

A Python Framework For NoSQL Scanning and Exploitation

Data

README.md

Original

Baikal Requirements Status

Nosql-Exploitation-Framework

A FrameWork For NoSQL Scanning and Exploitation Framework

NoSQL Exploitation Framework 2.02b Released

Author

  • NoSQL Exploitation Framework Authored By Francis Alexander

Wiki

Features:

  • First Ever Tool With Added Support For Mongo,Couch,Redis,H-Base,Cassandra
  • Support For NoSQL WebAPPS
  • Added payload list for JS Injection,Web application Enumeration.
  • Scan Support for Mongo,CouchDB and Redis
  • Dictionary Attack Support for Mongo,Couch and Redis
  • Enumeration Module added for the DB's,retrieves data in db's @ one shot.
  • Currently Discover's Web Interface for Mongo
  • Shodan Query Feature
  • MultiThreaded IP List Scanner
  • Dump and Copy Database features Added for CouchDB
  • Sniff for Mongo,Couch and Redis

Change Log V2.02b:

  • The framework has been updated and moved to python3
  • Added Dockerfile
  • Bug fixes

Installation

  • Install Pip, sudo apt-get install python-setuptools;easy_install pip
  • pip install -r requirements.txt
  • python nosqlframework.py -h (For Help Options)

Installation (Docker)

  • docker build -t torque59/nosqlframework . OR docker pull torque59/nosqlframework
  • docker run -it torque59/nosqlframework --help
  • docker run -it torque59/nosqlframework -ip ip_Addr -enum mongo

Installation on Mac/Kali

  • Removed the scapy module by default for mac. So this should run by default. If you need to sniff run the script and then continue.
  • Run installformac-kali.sh directly
  • python nosqlframework.py -h (For Help Options)

Installing Nosql Exploitaiton Framework in Virtualenv

  • virtualenv nosqlframework
  • source nosqlframework/bin/activate
  • pip install -r requirements.txt
  • nosqlframework/bin/python nosqlframework.py -h (For Help Options)
  • deactivate (After usage)

Contribution

  • It would be great seeing this project grow , do contribute by issuing a pull request.

Sample Usage

  • nosqlframework.py -ip localhost -scan
  • nosqlframework.py -ip localhost -dict mongo -file b.txt
  • nosqlframework.py -ip localhost -enum couch
  • nosqlframework.py -ip localhost -enum redis
  • nosqlframework.py -ip localhost -clone couch

Sample Output

Future Releases

  • Improved Web App Detection
  • Support for Neo4j on the way
  • Web Interface attack and Fuzz Platform

Bugs or Queries