v3.2.0

What's New

• pip installable: `pip install mongosmash-3.2.0-py3-none-any.whl` gives you a `mongosmash` command, no more `python3 mongosmash.py`
• CIDR range support: target files now accept `10.0.0.0/24`-style ranges alongside plain IPs
• Single-host mode: `-H/--host` scans one target without needing a file
• Weak credential checks: `--creds wordlist.txt` (user:pass per line) tries common credentials against instances that require authentication instead of just logging and moving on
• Version fingerprinting: exposed instances now report their MongoDB version via `buildInfo`, useful for CVE matching
• Stealth pacing: `--delay` adds a wait between connection attempts
• Markdown report: every run now writes `.mongosmash/report.md` alongside the JSON summary, ready to drop into an engagement deliverable
• Fixed a missing `colorama` dependency in requirements.txt
• Fixed the collection dumper writing invalid JSON (`str(document)` per line) instead of real, properly-serialized JSON
• Added a document-per-collection cap (`--limit`) so one huge collection can't hang a scan
• Graceful Ctrl+C handling instead of a raw traceback
• New ASCII art banner

Install

```bash
pip install https://github.com/01xJB/mongosmash/releases/download/v3.2.0/mongosmash-3.2.0-py3-none-any.whl
mongosmash --help
```