Saying no to SQL – owning MongoDBs

MongoDB is a free, open source, cross-platform database program. It uses JSON-like documents with schemas. The default security configuration of MongoDB allows anyone to access data unauthenticated. In this recipe, we will see how to exploit that vulnerability.

Getting ready

MongoDB runs on port 27017 by default. To access MongoDB, we need to download and install the MongoDB client. There are multiple clients available; we will use Studio 3T, which can be downloaded from https://studio3t.com/.

How to do it...

Let's perform...