Because in many times the intranet scan does not have the authorized win's good, a little bit of weak password scanner (generate reports, a variety of services), compiled into a plug-in, and then made a MONGODB scan plug-in.
X-scan after loading:
Mongodb.plug:
Mysql.plug:
Scanning:
X-scan SCAN Plugs
1. mysql Weak password scan
2. MongoDB Unauthorized Scan
X-scan Download:
Http://www.xfocus.net/tools/200507/1057.html
Sdk:
Http://www.xfocus.net/projects/X-Scan/index.html
Plugins that already exist:
Dcomrpc.xpn
Submit User: Hhkk
Http://www.xfocus.net/tools/200307/488.html
Crack_mysql.cpp
Submit User: Ph4_yunshu
Http://www.xfocus.net/tools/200609/1188.html
Webmaster Daniel's Shoulder Ph4_yunshu
Crack_mysql plugin:
Crack_mysql.cpp plug-in code is on the basis of Ph4_yunshu slightly change the compilation through the
LibmySQL.dll files are required for Crack_mysql.cpp compilation and scanning
Crack_mysql source machine compiled plug-ins and their libmySQL.dll
Http://yunpan.cn/cZEMIp5SkkcKJ (Extract code: a280)
User Name Dictionary:
Dat\mysql_user.dic
Password Dictionary:
Dat\mysql_pass.dic
LibmySQL.dll Release Scanner Catalog
Scan_mongodb plugin:
Scan_mongodb.cpp plug-in code there is no similar to Conn.close () This code, write the time did not find a call, if there are other methods, please inform.
PS: So use the "#define Timeout 10000" Scan timeout to exit
Mongoclient.dll files are required for Scan_mongodb.cpp compilation and scanning
SCAN_MONGODB source machine compiled plug-ins and their mongoclient.dll
Http://yunpan.cn/cZEkM7Yt2LKV7 (Extract code: D43F)
Project Source:
Https://github.com/yanyueoo7/X-SCAN-Scan.Plugs
X-scan Scanner plugin (mysql weak password and MongoDB not authorized)