Mirrors/hacktricks

Fork 0

mirror of https://github.com/carlospolop/hacktricks synced 2024-11-21 20:23:18 +00:00

Translator workflow b442ae90c4 Translated to Klingon

2024-02-10 17:52:19 +00:00

13 KiB

Raw Permalink Blame History

9042/9160 - Pentesting Cassandra

htARTE (HackTricks AWS Red Team Expert) ! tlhIngan Hol

HackTricks yIqImHa' tlhIngan Hol vItlhutlh AWS hacking zero to hero.

HackTricks SUBSCRIPTION PLANS ghItlh tlhIngan Hol download company advertised want If swag HackTricks & PEASS official ghItlh
PEASS Family ghItlh exclusive NFTs collection our Discover
HackTricks Twitter 🐦 @carlospolopm us on follow or telegram group the ghItlh group Discord 💬 Join
github repos HackTricks Cloud HackTricks github repos submitting PRs tricks hacking your Share

Basic Information

Apache Cassandra NoSQL database type a is. failure of point single no with availability high providing, servers commodity many across data of amounts large handle to designed database distributed performance high, scalable highly is Cassandra Apache.

database the enumerate to attacker an allow potentially could this and configured any aren't there credentials any Cassandra that find may you cases several In.

Default port: 9042,9160

PORT     STATE SERVICE   REASON
9042/tcp open  cassandra-native Apache Cassandra 3.10 or later (native protocol versions 3/v3, 4/v4, 5/v5-beta)
9160/tcp open  cassandra syn-ack

QaD

Qa

pip install cqlsh
cqlsh <IP>
#Basic info enumeration
SELECT cluster_name, thrift_version, data_center, partitioner, native_protocol_version, rack, release_version from system.local;
#Keyspace enumeration
SELECT keyspace_name FROM system.schema_keyspaces;
desc <Keyspace_name>    #Decribe that DB
desc system_auth        #Describe the DB called system_auth
SELECT * from system_auth.roles;  #Retreive that info, can contain credential hashes
SELECT * from logdb.user_auth;    #Can contain credential hashes
SELECT * from logdb.user;
SELECT * from configuration."config";

QaD

QaD vItlhutlh. nmap vItlhutlh vaj ngeD.

nmap -sV --script cassandra-info -p <PORT> <IP>

Brute force

Shodan

port:9160 Cluster
port:9042 "Invalid or unsupported protocol version"

Learn AWS hacking from zero to hero with htARTE (HackTricks AWS Red Team Expert)!

Other ways to support HackTricks:

If you want to see your company advertised in HackTricks or download HackTricks in PDF Check the SUBSCRIPTION PLANS!
Get the official PEASS & HackTricks swag
Discover The PEASS Family, our collection of exclusive NFTs
Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @carlospolopm.
Share your hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

13 KiB Raw Permalink Blame History

9042/9160 - Pentesting Cassandra

Basic Information

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

QaD

13 KiB

Raw Permalink Blame History