Features

Awesome set of features

The current edition of NoSQL Exploitation framework supports for the following databases

• Mongo
• CouchDB
• Redis
• Cassandra
• Partial Support for H-Base

Regarding the feature set following have been implemented for different databases

• Mongo

• Checks and Enumerates Mongo System/Configuration information & REST API.

• Support for enumerating databases,collections and data.

• Checks for Clients Connected.

• Dictionary attack module.

• Currently checks for known CVE's.

• CouchDB

• Checks for CouchAPI.

• Dictionary attack module.

• Support for enumerating databases,tables and data.

• Redis

• Enumerates Redis Configuration.

• Enumerates Redis keys,strings.

• Module to Check for Redis file enumeration.

• Module to Check for Redis LUA RCE vulnerability.

• Dictionary attack module.