Nmap mongodb-info NSE Script


This page contains detailed information about how to use the mongodb-info NSE script. For list of all NSE scripts, visit the Nmap NSE Library.

Script Overview

Script source code: https://github.com/nmap/nmap/tree/master/scripts/mongodb-info.nse
Script categories: default, discovery, safe
Target service / protocol: mongodb, mongod
Target network port(s): 27017
List of CVEs: -

Script Description

The mongodb-info.nse script attempts to get build info and server status from a MongoDB database.

Mongodb-info NSE Script Arguments

This is a full list of arguments supported by the mongodb-info.nse script:

mongodb-info.db

Database to check. Default: admin

creds.global

Credentials to be returned by Credentials.getCredentials regardless of the service.

creds.[service]

Credentials to be returned by Credentials.getCredentials for [service]. E.g. creds.http=admin:password

- - -
To use these script arguments, add them to the Nmap command line using the --script-args arg1=value,[arg2=value,..] syntax. For example:

nmap --script=mongodb-info --script-args mongodb-info.db=value,creds.global=value <target>

Mongodb-info NSE Script Example Usage

Here's an example of how to use the mongodb-info.nse script:

nmap -p 27017 --script mongodb-info <host>

Mongodb-info NSE Script Example Output

Here's a sample output from the mongodb-info.nse script:

PORT      STATE SERVICE REASON
27017/tcp open  unknown syn-ack
| mongodb-info:
|   MongoDB Build info
|     ok = 1
|     bits = 64
|     version = 1.3.1-
|     gitVersion = d1f0ffe23bcd667f4ed18a27b5fd31a0beab5535
|     sysInfo = Linux domU-12-31-39-06-79-A1 2.6.21.7-2.ec2.v1.2.fc8xen #1 SMP Fri Nov 20 17:48:28 EST 2009 x86_64 BOOST_LIB_VERSION=1_41
|   Server status
|     opcounters
|       delete = 0
|       insert = 3
|       getmore = 0
|       update = 0
|       query = 10
|     connections
|       available = 19999
|       current = 1
|     uptime = 747
|     mem
|       resident = 9
|       virtual = 210
|       supported = true
|       mapped = 80
|     ok = 1
|     globalLock
|       ratio = 0.010762343463949
|       lockTime = 8037112
|       totalTime = 746780850
|     extra_info
|       heap_usage_bytes = 117120
|       note = fields vary by platform
|_      page_faults = 0

Mongodb-info NSE Script Example XML Output

There is no sample XML output for this module. However, by providing the -oX <file> option, Nmap will produce a XML output and save it in the file.xml file.

Author

  • Martin Holst Swende

References

See Also

Related NSE scripts to the mongodb-info.nse script:

Visit Nmap NSE Library for more scripts.

Version

This page has been created based on Nmap version 7.92.