X-scan Scanner plugin (mysql weak password and MongoDB not authorized)

Source: Internet
Author: User
Tags mongoclient

Because in many times the intranet scan does not have the authorized win's good, a little bit of weak password scanner (generate reports, a variety of services), compiled into a plug-in, and then made a MONGODB scan plug-in.

X-scan after loading:

Mongodb.plug:

Mysql.plug:

Scanning:

X-scan SCAN Plugs
1. mysql Weak password scan
2. MongoDB Unauthorized Scan

X-scan Download:
Http://www.xfocus.net/tools/200507/1057.html

Sdk:
Http://www.xfocus.net/projects/X-Scan/index.html

Plugins that already exist:
Dcomrpc.xpn
Submit User: Hhkk
Http://www.xfocus.net/tools/200307/488.html

Crack_mysql.cpp
Submit User: Ph4_yunshu
Http://www.xfocus.net/tools/200609/1188.html

Webmaster Daniel's Shoulder Ph4_yunshu

Crack_mysql plugin:
Crack_mysql.cpp plug-in code is on the basis of Ph4_yunshu slightly change the compilation through the
LibmySQL.dll files are required for Crack_mysql.cpp compilation and scanning
Crack_mysql source machine compiled plug-ins and their libmySQL.dll
Http://yunpan.cn/cZEMIp5SkkcKJ (Extract code: a280)
User Name Dictionary:
Dat\mysql_user.dic
Password Dictionary:
Dat\mysql_pass.dic
LibmySQL.dll Release Scanner Catalog

Scan_mongodb plugin:
Scan_mongodb.cpp plug-in code there is no similar to Conn.close () This code, write the time did not find a call, if there are other methods, please inform.
PS: So use the "#define Timeout 10000" Scan timeout to exit
Mongoclient.dll files are required for Scan_mongodb.cpp compilation and scanning
SCAN_MONGODB source machine compiled plug-ins and their mongoclient.dll
Http://yunpan.cn/cZEkM7Yt2LKV7 (Extract code: D43F)

Project Source:

Https://github.com/yanyueoo7/X-SCAN-Scan.Plugs

X-scan Scanner plugin (mysql weak password and MongoDB not authorized)

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.