phpMoAdmin - MongoDB unauthenticated remote execution 0day authomatic exploit

2015-02-28T00:00:00
ID 1337DAY-ID-23337
Type zdt
Reporter sp1nlock
Modified 2015-02-28T00:00:00

Description

This is an unauthenticated remote execution 0day exploit coded by sp1nlock phpMoAdmin is a web interface for mongodb databases, is like phpmyadmin but for this nosql bigdata oriented database named MongoDB. #### Usage Info ./phpmohack.py [url] [cmd] ex: ./phpmohack.py http://test.com/path/ 'ls -l'

This is private exploit. You can buy it at https://0day.today