For now check out Version 0.7.. Named searches and Data searches via external config files are now functioning properly as well as other bugs fixed along the way... Drop this in a BT5 VM and make sure you have your DB python stuff installed per the help docs and you should be good to go. If you are looking to use oracle you are going to have to install all the oracle nonsense from oracle or use a BT4r2 vm which has most of the needed drivers minus cxoracle which will need to be installed.
http://consolecowboys.org/pillager/pillage_0.7.zip
Ficti0n$ python pillager.py
[---] The Database Pillager (DBPillage) [---]
[---] CcLabs Release [---]
[---] Authors: Ficti0n, [---]
[---] Contributors: Steponequit [---]
[---] Version: 0.7 [---]
[---] Find Me On Twitter: ficti0n [---]
[---] Homepage: http://console-cowboys.blogspot.com [---]
Release Notes:
--Fixed bugs and optimized code
--Added Docstrings
--Fixed Named and Data searches from config files
About:
The Database Pillager is a multiplatform database tool for searching and browsing common
database platforms encountered while penetration testing. DBPillage can be used to search
for PCI/HIPAA data automatically or use DBPillage to browse databases,display data.
and search for specified tables/data instances.
DBpillage was designed as a post exploitation pillaging tool with a goal of targeted
extraction of data without the use of database platform specific GUI based tools that
are difficult to use and make my job harder.
Supported Platforms:
--------------------
-Oracle
-MSSQL
-MYSQL
-PostGreSQL
Usage Examples:
************************************************************************
For Mysql Postgres and MsSQL pillaging:
---------------------------------------
python dbPillage -a [address] -d [dbType] -u [username] -p [password]
For Oracle pillaging you need a SID connection string:
------------------------------------------------------
python dbPillage-a [address]/[sid] -d [dbType] -u [username] -p [password]
Grab some hashes and Hipaa specific:(Default is PCI)
------------------------------------
python dbPillage -a [address] -d [dbType] -u [username] -p [password] --hashes -s hipaa
Drop into a SQL CMDShell:
-------------------------
python dbpillage.py -a [address] -d [dbType] -u [username] -p [password] -q
Config file specified searches:
-------------------------------
Search for data Items from inputFiles/data.txt:
python dbpillage.py -a [address] -d [dbType] -u [username] -p [password] -D
Search for specific table names from inputFiles/tables.txt:
python dbpillage.py -a [address] -d [dbType] -u [username] -p [password] -N
Switch Options:
---------------------
-# --hashes = grab database password hashes
-l --limit = limit the amount of rows that are searched or when displaying data (options = any number)
-s --searchType = Type of data search you want to perform (options:pci, hipaa, all)(PCI default)
-u --user = Database servers username
-p --pass = Password for the database server
-a --address = Ipaddress of the database server
-d --database = The database type you are pillageing (options: mssql,mysql,oracle,postgres)
-r --report = report format (HTML, XML, screen(default))
-N --nameSearch = Search via inputFiles/tables.txt
-D --dataSearch = Targeted data searches per inputFiles/data.txt
-q --queryShell = Drop into a SQL CMDshell in mysql or mssql
Prerequisites:
-------------
python v2 (Tested on Python 2.5.2 BT4 R2 and BT5 R3 - Oracle stuff on BT4r2 only unless you install the drivers from oracle)
cx_oracle (cx-oracle.sourceforge.net)
psycopg2 (initd.org/psycopg/download/)
MySQLdb (should be on BT by default)
pymssql (should be on BT by default)
Related articles
- Game Hacking
- New Hacker Tools
- How To Install Pentest Tools In Ubuntu
- Hacking Tools Github
- Pentest Tools Website Vulnerability
- Blackhat Hacker Tools
- Hack Tools For Pc
- Hacking Tools For Mac
- Hack Apps
- Computer Hacker
- Hackrf Tools
- Hacker Search Tools
- Hacker Tools For Windows
- Hack Rom Tools
- Nsa Hack Tools
- Pentest Tools Download
- Pentest Tools Download
- Pentest Tools Port Scanner
- Hack Rom Tools
- Hack Tool Apk No Root
- Hack Tools For Pc
- Hacker Tools Apk Download
- Kik Hack Tools
- Pentest Tools Android
- Pentest Tools Subdomain
- Hacking Tools For Pc
- Pentest Tools Url Fuzzer
- Hacking Tools For Pc
- Termux Hacking Tools 2019
- Hacker Tools Apk Download
- Hacking Tools For Games
- New Hack Tools
- Hacking Tools Hardware
- Hack Tool Apk
- What Is Hacking Tools
- How To Install Pentest Tools In Ubuntu
- Underground Hacker Sites
- Pentest Tools Subdomain
- Hacker Tools For Windows
- How To Install Pentest Tools In Ubuntu
- Pentest Tools Url Fuzzer
- Hack Tools For Windows
- Hacker Techniques Tools And Incident Handling
- Hacker Tools Online
- Hacker Tools Hardware
- Hak5 Tools
- Pentest Tools Open Source
- Pentest Tools For Windows
- Hacking Tools For Windows 7
- Blackhat Hacker Tools
- Hacker Tools Online
- Physical Pentest Tools
- Hack Tools Download
- Hacking Tools Software
- Computer Hacker
- Nsa Hack Tools Download
- Pentest Reporting Tools
- Hacking Tools Download
- Hacking Tools And Software
- Hacking Apps
- How To Install Pentest Tools In Ubuntu
- Hack And Tools
- Hack Rom Tools
- Hack Tools For Ubuntu
- Pentest Box Tools Download
- Hacker Tools 2019
- Hack App
- Hacking Tools 2020
- Tools Used For Hacking
- Hacking Tools Free Download
- Hacker Tools Windows
- Hacker Tools Mac
- Hacker Tools Windows
- Hackrf Tools
- Hacker Tools Free
- Pentest Tools Framework
- Pentest Tools Website Vulnerability
- Pentest Tools Free
- Hacking Tools Mac
- Hacking Tools Windows 10
- Hacker Tools Windows
- Pentest Automation Tools
- Hacking Tools And Software
- Hacker Tools For Ios
- Pentest Tools For Mac
- Pentest Tools Website Vulnerability
- Pentest Box Tools Download
- Top Pentest Tools
- Hacker Tools For Windows
- Nsa Hack Tools Download
- Ethical Hacker Tools
- Blackhat Hacker Tools
- Hacking App
- Growth Hacker Tools
- Pentest Tools Free
- Hacker Tools For Windows
- Underground Hacker Sites
- Hacker Tools Hardware
- Hack App
- Pentest Tools Online
- Hack App
- Hackrf Tools
- Github Hacking Tools
- Hacking Tools Online
- Pentest Tools Windows
- Hacking Tools For Beginners
- Hack Tools For Games
- Game Hacking
- Physical Pentest Tools
- Pentest Tools Android
- Growth Hacker Tools
- Pentest Tools Subdomain
- Pentest Tools
- Underground Hacker Sites
- Pentest Tools Website
- Github Hacking Tools
- Hack Tools Pc
- Hacker Tools Software
- Hacking Tools Mac
- How To Install Pentest Tools In Ubuntu
No comments:
Post a Comment