Features

Jump to bottom Edit New page

Francis Alexander edited this page Jan 19, 2017 · 3 revisions

Awesome set of features

The current edition of NoSQL Exploitation framework supports for the following databases

Mongo
CouchDB
Redis
Cassandra
Partial Support for H-Base

Regarding the feature set following have been implemented for different databases

Mongo
Checks and Enumerates Mongo System/Configuration information & REST API.
Support for enumerating databases,collections and data.
Checks for Clients Connected.
Dictionary attack module.
Currently checks for known CVE's.
CouchDB
Checks for CouchAPI.
Dictionary attack module.
Support for enumerating databases,tables and data.
Redis
Enumerates Redis Configuration.
Enumerates Redis keys,strings.
Module to Check for Redis file enumeration.
Module to Check for Redis LUA RCE vulnerability.
Dictionary attack module.