Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to find unprotected databases with Netlas.io: Chapter 2

netlas.io | blog | #data-exposure | #osint | #guide | #mongodb | #databases | #netlas

Summary

Chapter 2 of the unprotected-database series: MongoDB and other cases of fully exposed DBMS instances, extra Netlas searches to widen the perimeter, and reminders on research ethics.
Published
Collected

original ↗

Related coverage

blog · netlas.io
I Analysed Over 3 Million Exposed Databases Using Netlas
An analysis of 3.2 million exposed databases across MongoDB, MySQL, Oracle, PostgreSQL, MSSQL and Elasticsearch: how many lack authentication, where they cluster, and exposure trends.
blog · netlas.io
Discovering Data Exposure with Netlas
How to find exposed configs, API keys, database credentials, bearer tokens and debug outputs at scale using Netlas response data — mapped to OWASP Top 10:2025 exposure categories.
blog · netlas.io
Using Maltego with Netlas Module
Instructions for using the Netlas module in Maltego: plugin installation, supported transforms, API key setup, Community Edition result limits, and how transforms count against monthly quotas.
blog · netlas.io
Using theHarvester with Netlas
Tutorial on using theHarvester with the Netlas integration for OSINT and subdomain discovery: four installation options, connecting the Netlas API key, and the data types the Netlas database offers.
blog · netlas.io
Mastering Online Camera Searches
A guide to finding exposed webcams worldwide via Google dorking, IoT search engines and specialized sites, with example queries for popular devices — and a firm ethics warning.
blog · netlas.io
Plug & Pwn: Mapping the Windows PnP Auto-Install Attack Surface
Netlas maps Windows PnP auto-install from DEF CON's Plug & Pwn: the OS fetches and runs vendor packages as SYSTEM; the remote variant rides authenticated RDP, so exposure can be scoped from outside.
back