November 2012
Intermediate to advanced
318 pages
6h 36m
English
During a security assessment for a MongoDB installation, it is possible to extract build information such as system details and server status, including the number of connections available, uptime, and memory usage.
This recipe describes how to retrieve server information from a MongoDB installation by using Nmap.
Open your terminal and enter the following Nmap command:
# nmap -p 27017 --script mongodb-info <target>
The MongoDB server information will be included in the script output section:
PORT STATE SERVICE 27017/tcp open mongodb | mongodb-info: | MongoDB Build info | ok = 1 | bits = 64 | version = 1.2.2 | gitVersion = nogitversion | sysInfo = Linux crested 2.6.24-27-server #1 SMP ...
Read now
Unlock full access