For now check out Version 0.7.. Named searches and Data searches via external config files are now functioning properly as well as other bugs fixed along the way... Drop this in a BT5 VM and make sure you have your DB python stuff installed per the help docs and you should be good to go. If you are looking to use oracle you are going to have to install all the oracle nonsense from oracle or use a BT4r2 vm which has most of the needed drivers minus cxoracle which will need to be installed.
http://consolecowboys.org/pillager/pillage_0.7.zip
Ficti0n$ python pillager.py
[---] The Database Pillager (DBPillage) [---]
[---] CcLabs Release [---]
[---] Authors: Ficti0n, [---]
[---] Contributors: Steponequit [---]
[---] Version: 0.7 [---]
[---] Find Me On Twitter: ficti0n [---]
[---] Homepage: http://console-cowboys.blogspot.com [---]
Release Notes:
--Fixed bugs and optimized code
--Added Docstrings
--Fixed Named and Data searches from config files
About:
The Database Pillager is a multiplatform database tool for searching and browsing common
database platforms encountered while penetration testing. DBPillage can be used to search
for PCI/HIPAA data automatically or use DBPillage to browse databases,display data.
and search for specified tables/data instances.
DBpillage was designed as a post exploitation pillaging tool with a goal of targeted
extraction of data without the use of database platform specific GUI based tools that
are difficult to use and make my job harder.
Supported Platforms:
--------------------
-Oracle
-MSSQL
-MYSQL
-PostGreSQL
Usage Examples:
************************************************************************
For Mysql Postgres and MsSQL pillaging:
---------------------------------------
python dbPillage -a [address] -d [dbType] -u [username] -p [password]
For Oracle pillaging you need a SID connection string:
------------------------------------------------------
python dbPillage-a [address]/[sid] -d [dbType] -u [username] -p [password]
Grab some hashes and Hipaa specific:(Default is PCI)
------------------------------------
python dbPillage -a [address] -d [dbType] -u [username] -p [password] --hashes -s hipaa
Drop into a SQL CMDShell:
-------------------------
python dbpillage.py -a [address] -d [dbType] -u [username] -p [password] -q
Config file specified searches:
-------------------------------
Search for data Items from inputFiles/data.txt:
python dbpillage.py -a [address] -d [dbType] -u [username] -p [password] -D
Search for specific table names from inputFiles/tables.txt:
python dbpillage.py -a [address] -d [dbType] -u [username] -p [password] -N
Switch Options:
---------------------
-# --hashes = grab database password hashes
-l --limit = limit the amount of rows that are searched or when displaying data (options = any number)
-s --searchType = Type of data search you want to perform (options:pci, hipaa, all)(PCI default)
-u --user = Database servers username
-p --pass = Password for the database server
-a --address = Ipaddress of the database server
-d --database = The database type you are pillageing (options: mssql,mysql,oracle,postgres)
-r --report = report format (HTML, XML, screen(default))
-N --nameSearch = Search via inputFiles/tables.txt
-D --dataSearch = Targeted data searches per inputFiles/data.txt
-q --queryShell = Drop into a SQL CMDshell in mysql or mssql
Prerequisites:
-------------
python v2 (Tested on Python 2.5.2 BT4 R2 and BT5 R3 - Oracle stuff on BT4r2 only unless you install the drivers from oracle)
cx_oracle (cx-oracle.sourceforge.net)
psycopg2 (initd.org/psycopg/download/)
MySQLdb (should be on BT by default)
pymssql (should be on BT by default)
Related links
- Hacker Tools Free
- Pentest Tools Windows
- Hacker Techniques Tools And Incident Handling
- Tools Used For Hacking
- Pentest Tools Download
- Pentest Tools Url Fuzzer
- What Are Hacking Tools
- Hacking Apps
- Hack Apps
- Hack Rom Tools
- Nsa Hacker Tools
- Hacker Tools Apk
- Tools Used For Hacking
- Growth Hacker Tools
- Hacking Tools Hardware
- Hack Tools For Mac
- Install Pentest Tools Ubuntu
- Hacker Tools For Windows
- Android Hack Tools Github
- Hacker Tools 2019
- Hacking Tools For Kali Linux
- Pentest Tools Website Vulnerability
- Hack Tools Pc
- Hack Tools For Windows
- Hacking Apps
- Hacker Tool Kit
- Pentest Tools Free
- Hack Tools Github
- Kik Hack Tools
- Hacker Tools Free
- Pentest Tools Bluekeep
- Kik Hack Tools
- Hacker Tools Apk Download
- Easy Hack Tools
- Hacker Tools
- Hacker Tools Online
- Hack Tool Apk
- Hacker Tools Online
- Android Hack Tools Github
- Pentest Tools Kali Linux
- Hack Tools 2019
- Underground Hacker Sites
- Hack Tools Download
- Hacking Tools Github
- Pentest Tools Github
- Pentest Tools For Windows
- Hacking Tools 2019
- Hack Tools Online
- Hack Tool Apk No Root
- Nsa Hack Tools
- Hack Tools Github
- Top Pentest Tools
- Hack And Tools
- Hacker Tools Free Download
- How To Install Pentest Tools In Ubuntu
- Nsa Hacker Tools
- Wifi Hacker Tools For Windows
- Hacker Tools List
- Tools Used For Hacking
- Pentest Automation Tools
- Hack Tools For Ubuntu
- Hacking Tools Pc
- Pentest Tools Tcp Port Scanner
- Hacker
- Best Hacking Tools 2020
- Best Hacking Tools 2019
- Pentest Tools Website
- Hacking Tools For Windows 7
- Ethical Hacker Tools
- Hacker Tools Free Download
- Hacking Tools Github
- Blackhat Hacker Tools
- Growth Hacker Tools
- How To Hack
- Hacker Tools Github
- Black Hat Hacker Tools
- Hak5 Tools
- Hacker Security Tools
- Computer Hacker
- Pentest Tools Alternative
- Nsa Hacker Tools
- Hacker Tools List
- Hacker Tools List
- Pentest Tools For Windows
- New Hacker Tools
- Hacking Tools Download
- Pentest Tools Framework
- Hacker Tools For Pc
- Tools Used For Hacking
- Hacker Tools Apk
- Hacker Hardware Tools
- Pentest Automation Tools
- Hacking Apps
- Hacking Tools Hardware
- Pentest Tools Find Subdomains
- Tools Used For Hacking
- Underground Hacker Sites
- Hacking Tools For Games
- Hacking Apps
- Pentest Tools Url Fuzzer
- Hacker Tools For Mac
- Pentest Tools Nmap
- Hacker Tools List
- Hacker Tools Free
- Tools For Hacker
- Pentest Tools Nmap
- Hacker Tools Mac
- New Hack Tools
- Pentest Tools Subdomain
- Usb Pentest Tools
- Hack Tools
- Pentest Tools
- Hacker Tools 2020
- Hacking Tools For Games
- Hacker Tools
- Pentest Tools
- Pentest Tools Windows
- Hack Tools Pc
- Pentest Tools Url Fuzzer
- Hacking Tools
No hay comentarios:
Publicar un comentario