Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/amnnrth/cve-2025-14847
ReconnaissanceVulnerability ScannersInformation GatheringNetwork SecurityMisconfigurationDatabase Security
GitHubamnnrth/cve-2025-14847

CVE-2025-14847

This script is used to identify MongoDB services that are network-exposed and allow unauthenticated protocol handshakes.

View Repository
27 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

📝 MongoDB Scanner – Run Notes

Script Name

mongo_exposure_scanner.py

1. Prerequisites

  • Python 3.9+
  • Network access to target hosts
  • Approved scope for scanning

Verify Python:

root@kitploit:~
python3 --version

2. Files Used

FilePurpose
mongo_scanner.pyScanner script
targets.txtTarget hosts and ports
mongo_exposed_targets.txtScan results (auto-created)

3. Target File Format (targets.txt)

Supported formats:

root@kitploit:~
# Host only (default ports used)
10.99.1.52

# Host with specific port
mongo.example.com:3717

# Multiple ports
192.168.1.10:27017,28017

# Port range
172.16.0.20:27017-27030

Notes:

  • # lines are ignored
  • Empty lines are ignored
  • Ports can be defined per host

4. How to Run the Script

Run the scanner:

root@kitploit:~
python3 mongo_scanner.py

The script will prompt:

root@kitploit:~
Enter target file name (default: targets.txt):

Options:

  • Press Enter → uses targets.txt
  • Type another filename → e.g. prod_mongo.txt

5. Example Run

Command

root@kitploit:~
python3 mongo_scanner.py

Input

root@kitploit:~
Enter target file name (default: targets.txt): prod_mongo.txt

Runtime Output

root@kitploit:~
[*] Using target file: prod_mongo.txt
[*] Total host:port pairs: 4
[*] Concurrency: 50 | Timeout: 5s
------------------------------------------------------------
[+] MongoDB OPEN: 10.99.1.52:3717
[-] 192.168.1.10:27017 - Not exposed
------------------------------------------------------------
[*] Done. Results saved to mongo_exposed_targets.txt

6. Output File

File Name

mongo_exposed_targets.txt

Example Content

root@kitploit:~
[2026-01-20 12:34:07] 10.99.1.52:3717 - Unauthenticated MongoDB exposed
[2026-01-20 12:34:07] dds-d9j6c3a7096ded641.mongodb.ap-southeast-5.rds.aliyuncs.com:3717 - Unauthenticated MongoDB exposed

7. Result Meaning

StatusMeaning
MongoDB OPEN

8. Common Issues

No output file created

  • Ensure at least one target is reachable
  • Check network/firewall access

Timeout or refused

  • Port closed or filtered
  • Reduce concurrency if scanning many hosts
Download Tool
MongoDB service responded to hello
Unauthenticated MongoDB exposedHandshake allowed without auth
Not exposedNot MongoDB or auth/connection blocked
Connection refused / timeoutService not reachable