MongoBrute. MongoDB user enumeration tool exploiting the authenticate command (UserNotFound leak) and saslSupportedMechs in hello. No dependencies, pure Python standard library.

github.com/portbuster1337/MongoBrute

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.