Port enumeration

With nmap I see an ssh and mongodb services open. 4bc7bb2610cc8ac9b6731d7c51fcfee6.png

Mongodb enumeration

First, I need to connect to the db using a client like mongosh.

mongosh 10.129.32.165

Here, I jut need to enumerate the collections.

show collections

cbe45a53287ec3e9202faae840a9908e.png And read the collection with the flag.

db.flag.find()

1f8702a4edc7f9f23901b5e6c01fc130.png