kayos
/
zgrab2
1
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Add mongodb dbnames (#332) 

* Allow database names & sizes to be pulled from mongo hosts

* Use cached getListDatabases msg; remove unused code
This commit is contained in:
dabdine 2022-07-01 14:04:46 -07:00 committed by GitHub
parent 11f0b8bd38
commit 48f15ef93b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 58 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

69
modules/mongodb/scanner.go
View File

@ -25,6 +25,7 @@ type Scanner struct {
isMasterMsg []byte
buildInfoCommandMsg []byte
buildInfoOpMsg []byte
listDatabasesMsg []byte
}
// scan holds the state for the scan of an individual target
@ -64,6 +65,17 @@ func getBuildInfoQuery() []byte {
return query_msg
}
// getListDatabasesMsg returns a mongodb message containing a command to retrieve MongoDB database info.
func getListDatabasesMsg() []byte {
query, err := bson.Marshal(bson.M{"listDatabases": 1})
if err != nil {
// programmer error
log.Fatalf("Invalid BSON: %v", err)
}
query_msg := getOpQuery("admin.$cmd", query)
return query_msg
}
// getOpQuery returns a mongodb OP_QUERY message containing the specified BSON-encoded query.
// query expected to be BSON byte array.
func getOpQuery(collname string, query []byte) []byte {
@ -132,9 +144,18 @@ type BuildEnvironment_t struct {
// BuildInfo_t holds the data returned by the the buildInfo query
type BuildInfo_t struct {
Version string `bson:"version,omitempty" json:"version,omitempty"`
GitVersion string `bson:"gitVersion,omitempty" json:"git_version,omitempty"`
BuildEnvironment BuildEnvironment_t `bson:"buildEnvironment,omitempty" json:"build_environment,omitempty"`
Version string `bson:"version,omitempty" json:"version,omitempty"`
GitVersion string `bson:"gitVersion,omitempty" json:"git_version,omitempty"`
SysInfo string `bson:"sysInfo,omitempty" json:"sys_info,omitempty"`
LoaderFlags string `bson:"loaderFlags,omitempty" json:"loader_flags,omitempty"`
CompilerFlags string `bson:"compilerFlags,omitempty" json:"compiler_flags,omitempty"`
Allocator string `bson:"allocator,omitempty" json:"allocator,omitempty"`
Debug bool `bson:"debug,omitempty" json:"debug,omitempty"`
Bits int32 `bson:"bits,omitempty" json:"bits,omitempty"`
MaxBsonObjectSize int32 `bson:"maxBsonObjectSize,omitempty" json:"max_bson_object_size,omitempty"`
JavascriptEngine string `bson:"javascriptEngine,omitempty" json:"javascript_engine,omitempty"`
StorageEngines []string `bson:"storageEngines,omitempty" json:"storage_engines,omitempty"`
BuildEnvironment BuildEnvironment_t `bson:"buildEnvironment,omitempty" json:"build_environment,omitempty"`
}
// IsMaster_t holds the data returned by an isMaster query
@ -149,10 +170,22 @@ type IsMaster_t struct {
ReadOnly bool `bson:"readOnly" json:"read_only"`
}
type DatabaseInfo_t struct {
Name string `bson:"name" json:"name"`
SizeOnDisk int64 `bson:"sizeOnDisk" json:"size_on_disk"`
Empty bool `bson:"empty" json:"empty"`
}
type ListDatabases_t struct {
Databases []DatabaseInfo_t `bson:"databases,omitempty" json:"databases,omitempty"`
TotalSize int64 `bson:"totalSize,omitempty" json:"total_size,omitempty"`
}
// Result holds the data returned by a scan
type Result struct {
IsMaster *IsMaster_t `json:"is_master,omitempty"`
BuildInfo *BuildInfo_t `json:"build_info,omitempty"`
IsMaster *IsMaster_t `json:"is_master,omitempty"`
BuildInfo *BuildInfo_t `json:"build_info,omitempty"`
DatabaseInfo *ListDatabases_t `json:"database_info,omitempty"`
}
// Init initializes the scanner
@ -162,6 +195,7 @@ func (scanner *Scanner) Init(flags zgrab2.ScanFlags) error {
scanner.isMasterMsg = getIsMasterMsg()
scanner.buildInfoCommandMsg = getBuildInfoQuery()
scanner.buildInfoOpMsg = getBuildInfoOpMsg()
scanner.listDatabasesMsg = getListDatabasesMsg()
return nil
}
@ -264,7 +298,21 @@ func getIsMaster(conn *Connection) (*IsMaster_t, error) {
return document, nil
}
func listDatabases(conn *Connection) (*ListDatabases_t, error) {
document := ListDatabases_t{}
conn.Write(conn.scanner.listDatabasesMsg)
msg, err := conn.ReadMsg()
if err != nil {
return nil, err
}
bson.Unmarshal(msg[MSGHEADER_LEN+20:], &document)
return &document, nil
}
// Scan connects to a host and performs a scan.
// https://github.com/mongodb/specifications/blob/master/source/message/OP_MSG.rst
func (scanner *Scanner) Scan(target zgrab2.ScanTarget) (zgrab2.ScanStatus, interface{}, error) {
scan, err := scanner.StartScan(&target)
if err != nil {
@ -278,6 +326,11 @@ func (scanner *Scanner) Scan(target zgrab2.ScanTarget) (zgrab2.ScanStatus, inter
return zgrab2.SCAN_PROTOCOL_ERROR, nil, err
}
result.DatabaseInfo, err = listDatabases(scan.conn)
if err != nil {
return zgrab2.SCAN_PROTOCOL_ERROR, nil, err
}
var query []byte
var resplen_offset int
var resp_offset int
@ -305,12 +358,6 @@ func (scanner *Scanner) Scan(target zgrab2.ScanTarget) (zgrab2.ScanStatus, inter
return zgrab2.SCAN_PROTOCOL_ERROR, &result, err
}
responselen := int(binary.LittleEndian.Uint32(msg[MSGHEADER_LEN : MSGHEADER_LEN+resplen_offset]))
if len(msg[MSGHEADER_LEN:]) < responselen {
err = fmt.Errorf("Server truncated BSON response doc (%d bytes: %s)",
len(msg[MSGHEADER_LEN:]), hex.EncodeToString(msg))
return zgrab2.SCAN_PROTOCOL_ERROR, &result, err
}
bson.Unmarshal(msg[MSGHEADER_LEN+resp_offset:], &result.BuildInfo)
return zgrab2.SCAN_SUCCESS, &result, err