Skip to content

Commit 1ce4767

Browse files
committed
Merge branch 'Development'
2 parents 389b921 + 972bfda commit 1ce4767

File tree

7 files changed

+617
-143
lines changed

7 files changed

+617
-143
lines changed

README.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
NoSQLMap
22
========
33

4-
[NoSQLMap](http://www.nosqlmap.net) v0.15b
4+
[NoSQLMap](http://www.nosqlmap.net) v0.2
55

66
Introduction
77
============
@@ -43,7 +43,8 @@ NoSQLMap uses a menu based system for building attacks. Upon starting NoSQLMap
4343
1-Set options (do this first)
4444
2-NoSQL DB Access Attacks
4545
3-NoSQL Web App attacks
46-
4-Exit
46+
4-Scan for Anonymous MongoDB Access
47+
x-Exit
4748
```
4849

4950
**ALWAYS USE OPTION 1 FIRST TO SET THE PARAMETERS!**
@@ -57,8 +58,9 @@ Explanation of options:
5758
5. Set my local Mongo/Shell IP-Set this option if attacking a MongoDB instance directly to the IP of a target Mongo installation to clone victim databases to or open Meterpreter shells to.
5859
6. Set shell listener port-If opening Meterpreter shells, specify the port.
5960
7. Load options file-Load a previously saved set of settings for 1-6.
60-
8. Save options file-Save settings 1-6 for future use.
61-
9. Back to main menu-Use this once the options are set to start your attacks.
61+
8. Load options from saved Burp request-Parse a request saved from Burp Suite and populate the web application options.
62+
9. Save options file-Save settings 1-6 for future use.
63+
x. Back to main menu-Use this once the options are set to start your attacks.
6264
```
6365

6466
Once options are set head back to the main menu and select DB access attacks or web app attacks as appropriate for whether you are attacking a NoSQL management port or web application. The rest of the tool is "wizard" based and fairly self explanatory, but send emails to [email protected] or find me on Twitter [@tcstoolHax0r](https://twitter.com/tcstoolHax0r) if you have any questions or suggestions.

0 commit comments

Comments
 (0)