akde/infosec

Information security is ultimately about managing risk

27017 MongoDB

Try to just login. Per default, no user is required.
mongodb $target
Enumerate with NSE scripts
nmap -sV --script "mongo* and default" -p 27017 $target
Try to connect
mongo 'mongodb://nodebb:nodebb@192.168.91.69:27017/nodebb'

You must be logged in to post a comment.

Personal collection of some infosec stuff. Primary purpose of this site is to collect and organize for myself.

Note: Some content is not publicly visible due to copyright issues. Therefore, some links could be broken.

python -c 'import pty;pty.spawn("/bin/bash")';

python3 -c 'import pty;pty.spawn("/bin/bash")';