{"action":"created","issue":{"url":"https://api.github.com/repos/tcstool/NoSQLMap/issues/30","labels_url":"https://api.github.com/repos/tcstool/NoSQLMap/issues/30/labels{/name}","comments_url":"https://api.github.com/repos/tcstool/NoSQLMap/issues/30/comments","events_url":"https://api.github.com/repos/tcstool/NoSQLMap/issues/30/events","html_url":"https://github.com/tcstool/NoSQLMap/issues/30","id":125966706,"number":30,"title":"NoSQLMap is unable to find target","user":{"login":"g0tmi1k","id":535942,"avatar_url":"https://avatars.githubusercontent.com/u/535942?v=3","gravatar_id":"","url":"https://api.github.com/users/g0tmi1k","html_url":"https://github.com/g0tmi1k","followers_url":"https://api.github.com/users/g0tmi1k/followers","following_url":"https://api.github.com/users/g0tmi1k/following{/other_user}","gists_url":"https://api.github.com/users/g0tmi1k/gists{/gist_id}","starred_url":"https://api.github.com/users/g0tmi1k/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/g0tmi1k/subscriptions","organizations_url":"https://api.github.com/users/g0tmi1k/orgs","repos_url":"https://api.github.com/users/g0tmi1k/repos","events_url":"https://api.github.com/users/g0tmi1k/events{/privacy}","received_events_url":"https://api.github.com/users/g0tmi1k/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2016-01-11T15:18:29Z","updated_at":"2016-01-12T09:00:47Z","closed_at":null,"body":"Using commit 898a60b0c916eb53ec65b7417baffddaf74f41b5.\r\n\r\nNoSQLMap is reporting the target does not response correctly, when in fact it is (See cURL at the end).\r\n\r\n**Edit**:\r\nAnother issue - when it cannot find the target, re-running will cause a crash. (see first comment)\r\n\r\n```\r\nroot@kali:~/NoSQLMap-0.5# cat test \r\n10.11.1.xxx,443,/cgi-bin/mongo/2.2.3/dbparse.py,GET,Not Set,Not Set,ON,ON,\r\n{}root@kali:~/NoSQLMap-0.5# python nosqlmap.py \r\n\u001B[3;J\r\n====================================================\r\n _   _       _____  _____ _     ___  ___            \r\n| \\ | |     /  ___||  _  | |    |  \\/  |            \r\n|  \\| | ___ \\ `--. | | | | |    | .  . | __ _ _ __  \r\n| . ` |/ _ \\ `--. \\| | | | |    | |\\/| |/ _` | '_ \\ \r\n| |\\  | (_) /\\__/ /\\ \\/' / |____| |  | | (_| | |_) |\r\n\\_| \\_/\\___/\\____/  \\_/\\_\\_____/\\_|  |_/\\__,_| .__/\r\n====================================================\r\nNoSQLMap-v0.5\r\nnosqlmap@gmail.com\r\n\r\n\r\n1-Set options\r\n2-NoSQL DB Access Attacks\r\n3-NoSQL Web App attacks\r\n4-Scan for Anonymous MongoDB Access\r\n5-Change Platform (Current: MongoDB)\r\nx-Exit\r\nSelect an option: 1\r\n\r\n\r\n\r\nOptions\r\n1-Set target host/IP (Current: Not Set)\r\n2-Set web app port (Current: 80)\r\n3-Set App Path (Current: Not Set)\r\n4-Toggle HTTPS (Current: OFF)\r\n5-Set MongoDB Port (Current : 27017)\r\n6-Set HTTP Request Method (GET/POST) (Current: GET)\r\n7-Set my local MongoDB/Shell IP (Current: Not Set)\r\n8-Set shell listener port (Current: Not Set)\r\n9-Toggle Verbose Mode: (Current: OFF)\r\n0-Load options file\r\na-Load options from saved Burp request\r\nb-Save options file\r\nx-Back to main menu\r\nSelect an option: 0\r\nEnter file name to load: test\r\n\r\n\r\n\r\nOptions\r\n1-Set target host/IP (Current: 10.11.1.xxx)\r\n2-Set web app port (Current: 443)\r\n3-Set App Path (Current: /cgi-bin/mongo/2.2.3/dbparse.py)\r\n4-Toggle HTTPS (Current: ON)\r\n5-Set MongoDB Port (Current : 27017)\r\n6-Set HTTP Request Method (GET/POST) (Current: GET)\r\n7-Set my local MongoDB/Shell IP (Current: Not Set)\r\n8-Set shell listener port (Current: Not Set)\r\n9-Toggle Verbose Mode: (Current: ON)\r\n0-Load options file\r\na-Load options from saved Burp request\r\nb-Save options file\r\nx-Back to main menu\r\nSelect an option: x\r\n\u001B[3;J\r\n====================================================\r\n _   _       _____  _____ _     ___  ___            \r\n| \\ | |     /  ___||  _  | |    |  \\/  |            \r\n|  \\| | ___ \\ `--. | | | | |    | .  . | __ _ _ __  \r\n| . ` |/ _ \\ `--. \\| | | | |    | |\\/| |/ _` | '_ \\ \r\n| |\\  | (_) /\\__/ /\\ \\/' / |____| |  | | (_| | |_) |\r\n\\_| \\_/\\___/\\____/  \\_/\\_\\_____/\\_|  |_/\\__,_| .__/\r\n====================================================\r\nNoSQLMap-v0.5\r\nnosqlmap@gmail.com\r\n\r\n\r\n1-Set options\r\n2-NoSQL DB Access Attacks\r\n3-NoSQL Web App attacks\r\n4-Scan for Anonymous MongoDB Access\r\n5-Change Platform (Current: MongoDB)\r\nx-Exit\r\nSelect an option: 3\r\nWeb App Attacks (GET)\r\n===============\r\nChecking to see if site at 10.11.1.xxx:443/cgi-bin/mongo/2.2.3/dbparse.py is up...\r\nLooks like the server didn't respond.  Check your options.\r\nPress enter to continue...\r\n\u001B[3;J\r\n\r\n\r\n====================================================\r\n _   _       _____  _____ _     ___  ___            \r\n| \\ | |     /  ___||  _  | |    |  \\/  |            \r\n|  \\| | ___ \\ `--. | | | | |    | .  . | __ _ _ __  \r\n| . ` |/ _ \\ `--. \\| | | | |    | |\\/| |/ _` | '_ \\ \r\n| |\\  | (_) /\\__/ /\\ \\/' / |____| |  | | (_| | |_) |\r\n\\_| \\_/\\___/\\____/  \\_/\\_\\_____/\\_|  |_/\\__,_| .__/\r\n====================================================\r\nNoSQLMap-v0.5\r\nnosqlmap@gmail.com\r\n\r\n\r\n1-Set options\r\n2-NoSQL DB Access Attacks\r\n3-NoSQL Web App attacks\r\n4-Scan for Anonymous MongoDB Access\r\n5-Change Platform (Current: MongoDB)\r\nx-Exit\r\nSelect an option: x\r\nroot@kali:~/NoSQLMap-0.5#\r\nroot@kali:~/NoSQLMap-0.5#\r\nroot@kali:~/NoSQLMap-0.5#\r\nroot@kali:~/NoSQLMap-0.5# curl -I -k https://10.11.1.xxx/cgi-bin/mongo/2.2.3/dbparse.py\r\nHTTP/1.1 200 OK\r\nDate: Mon, 11 Jan 2016 06:17:12 GMT\r\nServer: Apache/2.2.22 (Debian)\r\nVary: Accept-Encoding\r\nContent-Type: text/html\r\n\r\nroot@kali:~/NoSQLMap-0.5#\r\n```"},"comment":{"url":"https://api.github.com/repos/tcstool/NoSQLMap/issues/comments/170844239","html_url":"https://github.com/tcstool/NoSQLMap/issues/30#issuecomment-170844239","issue_url":"https://api.github.com/repos/tcstool/NoSQLMap/issues/30","id":170844239,"user":{"login":"g0tmi1k","id":535942,"avatar_url":"https://avatars.githubusercontent.com/u/535942?v=3","gravatar_id":"","url":"https://api.github.com/users/g0tmi1k","html_url":"https://github.com/g0tmi1k","followers_url":"https://api.github.com/users/g0tmi1k/followers","following_url":"https://api.github.com/users/g0tmi1k/following{/other_user}","gists_url":"https://api.github.com/users/g0tmi1k/gists{/gist_id}","starred_url":"https://api.github.com/users/g0tmi1k/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/g0tmi1k/subscriptions","organizations_url":"https://api.github.com/users/g0tmi1k/orgs","repos_url":"https://api.github.com/users/g0tmi1k/repos","events_url":"https://api.github.com/users/g0tmi1k/events{/privacy}","received_events_url":"https://api.github.com/users/g0tmi1k/received_events","type":"User","site_admin":false},"created_at":"2016-01-12T09:00:47Z","updated_at":"2016-01-12T09:00:47Z","body":"I can confirm that commit 295cc748378f38cc9fccb004e1b1063a1fe166c1 fixes the menu bug!\r\n\r\nHere is a video showing the SSL issue/problem: http://expirebox.com/download/a8a9bb65c5fc11ac710668e666fd58e1.html (Will run out in 48 hours)\r\nNoSQLMap was already installed before hand (which is why `python setup.py install` was so darn quick!).\r\nI am aware that SQLMap would of never worked - however, just doing it to show that it was able to access the same target."}}