https://ioctl.lol/tags/mongodb/Recent content in Mongodb on ioctlHugoenioctlTue, 07 Mar 2023 00:00:00 +0000https://ioctl.lol/ctf/offsec/dibble/Tue, 07 Mar 2023 00:00:00 +0000https://ioctl.lol/ctf/offsec/dibble/<div class="box-info"> <table> <tr><th colspan="2">ターゲット // Dibble</th></tr> <tr><td>Platform</td><td>OffSec Proving Grounds</td></tr> <tr><td>OS</td><td>Linux</td></tr> <tr><td>Difficulty</td><td>Medium</td></tr> <tr><td>IP</td><td><code>192.168.179.110</code></td></tr> </table> </div> <style> .box-info table { max-width: 400px; margin: 1.5em 0; } .box-info th { text-align: center; font-size: 1.1em; letter-spacing: 0.08em; } </style> <hr> <h2 id="enumeration">Enumeration</h2> <h3 id="nmap">Nmap</h3> <details class="collapse-section"> <summary>▶ Nmap output</summary> <div class="collapse-content"> <pre tabindex="0"><code>PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 3.0.3 22/tcp open ssh OpenSSH 8.3 (protocol 2.0) 80/tcp open http Apache httpd 2.4.46 ((Fedora)) 3000/tcp open http Node.js (Express middleware) 27017/tcp open mongodb MongoDB 4.2.9 </code></pre> </div> </details> <style> .collapse-section { border: 1px dashed var(--accent-alpha-20); padding: 0.5em 1em; margin: 1em 0; cursor: pointer; } .collapse-section[open] summary { margin-bottom: 0.8em; border-bottom: 1px dashed var(--accent-alpha-20); padding-bottom: 0.5em; } .collapse-section summary { font-weight: 700; color: var(--accent); outline: none; } .collapse-content { padding-top: 0.5em; } </style> <p>Fedora box with a busy surface. Anonymous FTP is allowed but the listing hangs and holds nothing. Port 80 is a stock <strong>Drupal 9.0.6</strong> install page (<code>/core/install.php</code>) — a red herring that goes nowhere. The two ports that matter are the <strong>MongoDB</strong> on 27017 (exposed with no auth) and the <strong>Node.js/Express</strong> app on 3000.</p>