News for hackers. Stuff that matters.

A comment on Finding MongoDB instances without any authentication.

Re:Finding MongoDB instances without any authentication by obblekk on Sunday July 19, 2015 @02:37PM (#9912291)
FYI: if you don't want to pay shodan for search results, you could run your own port scan using masscan(https://github.com/robertdavidgraham/masscan) by running the command

  masscan -p27017 0.0.0.0/0 --excludefile data/exclude.conf
Be warned that this will scan the entire IPv4 namespace.
[ Parent | on HN ]
Re:Finding MongoDB instances without any authentication by dordoka on Monday July 20, 2015 @01:37AM (#9914174)
If somebody wants to give obblekk's suggestion a try, you can use my docker masscan container right away [0]

[0] https://registry.hub.docker.com/u/dordoka/masscan/

[ Parent | on HN ]