Many exposed MongoDBs

MongoDB is a NoSQL document-oriented database that stores data in JSON-like (BSON) format. Unlike relational databases, it doesn't use tables and rows but collections of flexible documents, making it ideal for handling unstructured or semi-structured data. It is highly scalable and suited for modern applications requiring large data volumes and flexibility.

Looking for vulnerable targets

[1] With The follwing FOFA query returns thousands of open MongoDB "Mongo Express" web panels, but many of them could have been already compromised. header="Set-Cookie: mongo-express=" && header="200 OK" [2] This shodan query returns thousands of the open mongodb istances with also write access, you can dump all the database with the mongodump utility in the mongodb-database-tools package with this command: mongodump --host="HOST" --quiet To connect to the MongoDB server to remove, insert or edit data inside a collection you can use the mongosh utility in the mongodb-mongosh package. Connecting to the database: mongosh --host="HOST" --port 27017 here's the documentation. "MongoDB Server Information" port:27017 -authentication
[*] mongo_web_dashboard.png