fscan/Plugins/services/mongodb/exploiter.go
ZacharyZcR 7e4d5a0bcd feat: 实现MongoDB NoSQL数据库专业扫描插件
- 新增MongoDB协议识别和未授权访问检测
- 支持Wire Protocol(OP_MSG和OP_QUERY)
- 实现connector/exploiter/plugin三层架构
- 添加MongoDB专用国际化消息
- 自动注册到插件系统
2025-08-08 14:02:13 +08:00

36 lines
939 B
Go
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

package mongodb
import (
"context"
"github.com/shadow1ng/fscan/common"
"github.com/shadow1ng/fscan/plugins/base"
)
// MongoDBExploiter MongoDB利用器实现 - 最小化版本,不提供利用功能
type MongoDBExploiter struct {
*base.BaseExploiter
}
// NewMongoDBExploiter 创建MongoDB利用器
func NewMongoDBExploiter() *MongoDBExploiter {
exploiter := &MongoDBExploiter{
BaseExploiter: base.NewBaseExploiter("mongodb"),
}
// MongoDB插件不提供利用功能
exploiter.setupExploitMethods()
return exploiter
}
// setupExploitMethods 设置利用方法
func (e *MongoDBExploiter) setupExploitMethods() {
// MongoDB插件不提供利用功能仅进行未授权访问检测
}
// Exploit 利用接口实现 - 空实现
func (e *MongoDBExploiter) Exploit(ctx context.Context, info *common.HostInfo, creds *base.Credential) (*base.ExploitResult, error) {
// MongoDB插件不提供利用功能
return nil, nil
}