mirror of
https://github.com/shadow1ng/fscan.git
synced 2025-09-14 14:06:44 +08:00

- 新增MongoDB协议识别和未授权访问检测 - 支持Wire Protocol(OP_MSG和OP_QUERY) - 实现connector/exploiter/plugin三层架构 - 添加MongoDB专用国际化消息 - 自动注册到插件系统
36 lines
939 B
Go
36 lines
939 B
Go
package mongodb
|
||
|
||
import (
|
||
"context"
|
||
|
||
"github.com/shadow1ng/fscan/common"
|
||
"github.com/shadow1ng/fscan/plugins/base"
|
||
)
|
||
|
||
// MongoDBExploiter MongoDB利用器实现 - 最小化版本,不提供利用功能
|
||
type MongoDBExploiter struct {
|
||
*base.BaseExploiter
|
||
}
|
||
|
||
// NewMongoDBExploiter 创建MongoDB利用器
|
||
func NewMongoDBExploiter() *MongoDBExploiter {
|
||
exploiter := &MongoDBExploiter{
|
||
BaseExploiter: base.NewBaseExploiter("mongodb"),
|
||
}
|
||
|
||
// MongoDB插件不提供利用功能
|
||
exploiter.setupExploitMethods()
|
||
|
||
return exploiter
|
||
}
|
||
|
||
// setupExploitMethods 设置利用方法
|
||
func (e *MongoDBExploiter) setupExploitMethods() {
|
||
// MongoDB插件不提供利用功能,仅进行未授权访问检测
|
||
}
|
||
|
||
// Exploit 利用接口实现 - 空实现
|
||
func (e *MongoDBExploiter) Exploit(ctx context.Context, info *common.HostInfo, creds *base.Credential) (*base.ExploitResult, error) {
|
||
// MongoDB插件不提供利用功能
|
||
return nil, nil
|
||
} |