NoSQLAttack | open source Python tool to automate exploit MongoDB server

by youngyangyang04 Python Version: Current License: GPL-3.0

X-Ray Key Features Code Snippets Community Discussions Vulnerabilities Install Support

kandi X-RAY | NoSQLAttack Summary

NoSQLAttack is a Python library typically used in MongoDB applications. NoSQLAttack has no bugs, it has no vulnerabilities, it has build file available, it has a Strong Copyleft License and it has low support. You can download it from GitHub.

NoSQLAttack is an open source Python tool to automate expose MongoDB server IP on the internet and disclose the database data by MongoDB default configuration weaknesses and injection attacks. Presently, this project focuses on MongoDB. Some attack tests are based on and extensions of follow papers * [Diglossia: Detecting Code Injection Attacks with Precision and Efficiency] * [No SQL, No Injection?] * [Several thousand MongoDBs without access control on the Internet] There are two systems for testing NoSQL injection in this project-[NoSQLInjectionAttackDemo] # Background NoSQL injection attacks, for example php array injection, javascript injection and mongo shell injection, endanger mongoDB. There are thousands of mongoDB are exposed on the internet, and hacker can download data from exposed mongoDB.

Support

Quality

Security

License

Reuse

Support

NoSQLAttack has a low active ecosystem.

It has 270 star(s) with 84 fork(s). There are 8 watchers for this library.

It had no major release in the last 6 months.

There are 0 open issues and 3 have been closed. On average issues are closed in 1003 days. There are no pull requests.

It has a neutral sentiment in the developer community.

The latest version of NoSQLAttack is current.

Quality

NoSQLAttack has 0 bugs and 0 code smells.

Security

NoSQLAttack has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

NoSQLAttack code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

NoSQLAttack is licensed under the GPL-3.0 License. This license is Strong Copyleft.

Strong Copyleft licenses enforce sharing, and you can use them when creating open source projects.

Reuse

NoSQLAttack releases are not available. You will need to build from source code and install.

Build file is available. You can build the component from source.

Installation instructions are not available. Examples and code snippets are available.

NoSQLAttack saves you 296 person hours of effort in developing the same functionality from scratch.

It has 715 lines of code, 44 functions and 8 files.

It has high code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi has reviewed NoSQLAttack and discovered the below as its top functions. This is intended to give you an instant insight into NoSQLAttack implemented functionality, and help decide if they suit your requirements.

Gets the option selected
Build the attack URI
returns a list of the apps in the site
Stealing a database .
This function is used to test network attacks .
Initialize the main menu .
check response length and post injection
Scan MongoDB .
Main function .
Performs mongodb scan

Get all kandi verified functions for this library.

NoSQLAttack Key Features

No Key Features are available at this moment for NoSQLAttack.

NoSQLAttack Examples and Code Snippets

No Code Snippets are available at this moment for NoSQLAttack.

Community Discussions

No Community Discussions are available at this moment for NoSQLAttack.Refer to stack overflow page for discussions.

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install NoSQLAttack

You can download it from GitHub.
You can use NoSQLAttack like any standard Python library. You will need to make sure that you have a development environment consisting of a Python distribution including header files, a compiler, pip, and git installed. Make sure that your pip, setuptools, and wheel are up to date. When using pip it is generally recommended to install packages in a virtual environment to avoid changes to the system.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: