{"id":2870,"date":"2021-03-02T10:14:14","date_gmt":"2021-03-02T09:14:14","guid":{"rendered":"https:\/\/andreas-klingler.de\/infosec\/?p=2870"},"modified":"2022-05-23T15:12:49","modified_gmt":"2022-05-23T13:12:49","slug":"27017-mongodb","status":"publish","type":"post","link":"https:\/\/infosec.andreas-klingler.de\/?p=2870","title":{"rendered":"27017 MongoDB"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Enumeration<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Try to just login. Per default, no user is required.<br><code>mongodb $target<\/code><\/li><li>Enu\u00admer\u00adate with <span class=\"caps\">NSE<\/span> scripts<br><code>nmap -sV --script \"mongo* and default\" -p 27017 $target<\/code><\/li><li>Try to con\u00adnect<br><code>mongo 'mongodb:\/\/nodebb:nodebb@192.168.91.69:27017\/nodebb'<\/code><\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Optional<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>Try https:\/\/github.com\/codingo\/NoSQLMap <\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enu\u00admer\u00ada\u00adtion Try to just login. Per default, no user is required.mongodb $tar\u00adget Enu\u00admer\u00adate with <span class=\"caps\">NSE<\/span> script\u00adsn\u00admap \u2011sV \u2013script \u201cmon\u00adgo* and default\u201d \u2011p 27017 $tar\u00adget Try to con\u00adnectmongo \u2018mongodb:\/\/nodebb:nodebb@192.168.91.69:27017\/nodebb\u2019 Option\u00adal Try https:\/\/github.com\/codingo\/NoSQLMap<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wp_typography_post_enhancements_disabled":false,"footnotes":""},"categories":[36],"tags":[175],"class_list":["post-2870","post","type-post","status-publish","format-standard","hentry","category-port","tag-mongodb"],"_links":{"self":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2870","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2870"}],"version-history":[{"count":4,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2870\/revisions"}],"predecessor-version":[{"id":3559,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2870\/revisions\/3559"}],"wp:attachment":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2870"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2870"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2870"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}