New answers tagged

1

Note that in the case of MongoDB, the lack of authorization at the shell is by design. It is possible to connect unauthenticated to any MongoDB shell. However you are limited to just seeing the version number of mongo and whether the node you are connected to is a primary or secondary. Unless you authenticate as a user account with privileges for a given ...


2

If it is publicly facing and unauthenticated it is as easy as using a MongoDB administrative client, plugging in the server details, and connecting. Depending on the client's response would prove it is definitive. This is exactly what Shodan is doing. They spider the internet making connections with everything. And try to dump whatever information they can ...



Top 50 recent answers are included