Listing CouchDB databases
CouchDB installations may contain several databases. Nmap provides an easy way to list the available databases for penetration testers who are looking for interesting content or for system administrators who need to monitor for rogue databases.
This recipe will show you how to list databases in CouchDB servers with Nmap.
How to do it...
To list all databases in a CouchDB server with Nmap, enter the following command:
$nmap -p5984 --script couchdb-databases <target>
The results will include all the databases returned in the script output section:
PORT STATE SERVICE VERSION 5984/tcp open httpd Apache CouchDB 0.10.0 (ErlangOTP/R13B) | couchdb-databases: | 1 = nmap |_ 2 = packtpub
How it works...
The -p5984 --script couchdb-databases
options tell Nmap to initiate the couchdb-databases
NSE script if a CouchDB HTTP service is found running on port 5984
.