For now check out Version 0.7.. Named searches and Data searches via external config files are now functioning properly as well as other bugs fixed along the way... Drop this in a BT5 VM and make sure you have your DB python stuff installed per the help docs and you should be good to go. If you are looking to use oracle you are going to have to install all the oracle nonsense from oracle or use a BT4r2 vm which has most of the needed drivers minus cxoracle which will need to be installed.
http://consolecowboys.org/pillager/pillage_0.7.zip
Ficti0n$ python pillager.py
[---] The Database Pillager (DBPillage) [---]
[---] CcLabs Release [---]
[---] Authors: Ficti0n, [---]
[---] Contributors: Steponequit [---]
[---] Version: 0.7 [---]
[---] Find Me On Twitter: ficti0n [---]
[---] Homepage: http://console-cowboys.blogspot.com [---]
Release Notes:
--Fixed bugs and optimized code
--Added Docstrings
--Fixed Named and Data searches from config files
About:
The Database Pillager is a multiplatform database tool for searching and browsing common
database platforms encountered while penetration testing. DBPillage can be used to search
for PCI/HIPAA data automatically or use DBPillage to browse databases,display data.
and search for specified tables/data instances.
DBpillage was designed as a post exploitation pillaging tool with a goal of targeted
extraction of data without the use of database platform specific GUI based tools that
are difficult to use and make my job harder.
Supported Platforms:
--------------------
-Oracle
-MSSQL
-MYSQL
-PostGreSQL
Usage Examples:
************************************************************************
For Mysql Postgres and MsSQL pillaging:
---------------------------------------
python dbPillage -a [address] -d [dbType] -u [username] -p [password]
For Oracle pillaging you need a SID connection string:
------------------------------------------------------
python dbPillage-a [address]/[sid] -d [dbType] -u [username] -p [password]
Grab some hashes and Hipaa specific:(Default is PCI)
------------------------------------
python dbPillage -a [address] -d [dbType] -u [username] -p [password] --hashes -s hipaa
Drop into a SQL CMDShell:
-------------------------
python dbpillage.py -a [address] -d [dbType] -u [username] -p [password] -q
Config file specified searches:
-------------------------------
Search for data Items from inputFiles/data.txt:
python dbpillage.py -a [address] -d [dbType] -u [username] -p [password] -D
Search for specific table names from inputFiles/tables.txt:
python dbpillage.py -a [address] -d [dbType] -u [username] -p [password] -N
Switch Options:
---------------------
-# --hashes = grab database password hashes
-l --limit = limit the amount of rows that are searched or when displaying data (options = any number)
-s --searchType = Type of data search you want to perform (options:pci, hipaa, all)(PCI default)
-u --user = Database servers username
-p --pass = Password for the database server
-a --address = Ipaddress of the database server
-d --database = The database type you are pillageing (options: mssql,mysql,oracle,postgres)
-r --report = report format (HTML, XML, screen(default))
-N --nameSearch = Search via inputFiles/tables.txt
-D --dataSearch = Targeted data searches per inputFiles/data.txt
-q --queryShell = Drop into a SQL CMDshell in mysql or mssql
Prerequisites:
-------------
python v2 (Tested on Python 2.5.2 BT4 R2 and BT5 R3 - Oracle stuff on BT4r2 only unless you install the drivers from oracle)
cx_oracle (cx-oracle.sourceforge.net)
psycopg2 (initd.org/psycopg/download/)
MySQLdb (should be on BT by default)
pymssql (should be on BT by default)
More information
- Pentest Tools List
- Hacking Tools Github
- Hacking Tools Windows
- Hacker Tools Free
- Hack App
- Hacker Tools Github
- Pentest Tools Port Scanner
- Hacker Tools 2019
- How To Make Hacking Tools
- Hacker Tools Apk
- New Hack Tools
- Pentest Tools Apk
- Hacking Tools 2019
- Pentest Tools For Mac
- What Is Hacking Tools
- Growth Hacker Tools
- Hacker Tools For Ios
- Hacking Tools For Beginners
- Underground Hacker Sites
- Pentest Reporting Tools
- Tools Used For Hacking
- Pentest Tools Nmap
- Pentest Tools Linux
- Pentest Tools For Ubuntu
- Pentest Tools Github
- Hacking Tools Name
- Hacking Tools Pc
- Hacker Tools List
- Hacker Tools Hardware
- Nsa Hacker Tools
- Hacker Tools For Pc
- Pentest Tools Review
- Hacking Tools Usb
- Pentest Tools For Windows
- Hacking Tools For Pc
- Hacker Security Tools
- Hacker Tools Free Download
- Ethical Hacker Tools
- Pentest Automation Tools
- Hacking Tools Windows
- Hacking Tools For Games
- How To Hack
- Pentest Reporting Tools
- Hacking Tools
- Android Hack Tools Github
- Hack Tools For Windows
- Hacking Tools For Windows 7
- Pentest Tools For Windows
- Computer Hacker
- Hacker Tools 2019
- Best Hacking Tools 2019
- Hacker Tools List
- Hacker Tools Mac
- Hacks And Tools
- Blackhat Hacker Tools
- Top Pentest Tools
- Pentest Tools Website Vulnerability
- Pentest Tools Website
- Easy Hack Tools
- Hacker Tools For Mac
- New Hacker Tools
- Hacking Tools And Software
- Pentest Tools Port Scanner
- Hacking Tools Windows 10
- Hacking Tools For Games
- Pentest Tools Framework
- Pentest Tools Download
- New Hacker Tools
- Hack Rom Tools
- Hack App
- Game Hacking
- Pentest Tools Port Scanner
- Hack Tools
- Pentest Tools Download
- New Hack Tools
- Free Pentest Tools For Windows
- Hacking Tools For Beginners
- Hacker Tools For Mac
- Pentest Tools Bluekeep
- Hacking Tools Download
- Hacker Tools Mac
- Usb Pentest Tools
- Hacker Tools Github
- How To Hack
- Easy Hack Tools
- Underground Hacker Sites
- Hacker Tools 2019
- Install Pentest Tools Ubuntu
- Hacking Tools Github
- Hack Tools Download
- Computer Hacker
- Pentest Tools Nmap
- Pentest Tools Alternative
- Game Hacking
- Hacker Search Tools
- Hack Tools For Mac
- Hacking Tools Usb
- Hacker Tools Hardware
- Hack Tools For Mac
- Hacker Security Tools
- Pentest Tools Find Subdomains
- Beginner Hacker Tools
- Game Hacking
- Pentest Tools Alternative
- Pentest Tools Tcp Port Scanner
- Tools For Hacker
- New Hack Tools
- Android Hack Tools Github
- Hackers Toolbox
- Pentest Recon Tools
- Pentest Tools Url Fuzzer
- Hack Tools For Mac
- New Hack Tools
- Beginner Hacker Tools
- Hacker Tools Linux
- Hack Tools For Mac
- Hack Tools
- Hacking Tools For Windows Free Download
- Hacking Tools Hardware
- Blackhat Hacker Tools
- Pentest Tools Url Fuzzer
- Pentest Tools Subdomain
- Nsa Hack Tools
- Hacker Tools 2019
- Hack Tools For Games
- Hacking Tools For Windows Free Download
- Hacking Tools Github
- Hacker Tools Software
- Pentest Tools Open Source
- Pentest Reporting Tools
- Hacking App
- Hacker Hardware Tools
- Hacker Hardware Tools
- Free Pentest Tools For Windows
- Beginner Hacker Tools
- Hacking Tools For Kali Linux
- Hacking Tools Usb
- Pentest Tools Subdomain
- Hacking Tools Github
- Pentest Tools Linux
- Hacking Tools For Games
- Hacks And Tools
- Pentest Tools Windows
- Hack Tools For Pc
- Hack Tools For Pc
- Hak5 Tools
- Pentest Tools Kali Linux
- Hackrf Tools
- Hack Tools For Mac
- Hacker Tools Software
- Hack And Tools
- Pentest Tools Subdomain
- Underground Hacker Sites
- Hacking Tools Windows 10
- Hack Tools Mac
- Pentest Tools Kali Linux
- Pentest Tools Alternative
- Hacker Tools For Mac
No comments:
Post a Comment