https://x7peeps.com/tags/MongoDB/index.htmlHugozh-CNWed, 17 Jun 2026 13:30:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/04-%E6%B8%97%E9%80%8F%E6%94%BB%E5%87%BB/MongoDB_%E6%96%87%E6%A1%A3%E6%95%B0%E6%8D%AE%E5%BA%93%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE%E4%B8%8E%E6%95%B0%E6%8D%AE%E5%AF%BC%E5%87%BA%E5%88%A9%E7%94%A8%E6%8A%80%E6%9C%AF/index.htmlWed, 17 Jun 2026 13:30:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/04-%E6%B8%97%E9%80%8F%E6%94%BB%E5%87%BB/MongoDB_%E6%96%87%E6%A1%A3%E6%95%B0%E6%8D%AE%E5%BA%93%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE%E4%B8%8E%E6%95%B0%E6%8D%AE%E5%AF%BC%E5%87%BA%E5%88%A9%E7%94%A8%E6%8A%80%E6%9C%AF/index.html围绕 MongoDB 的 27017 端口未授权访问、serverStatus 信息泄露、db.eval() 代码执行、copyDatabase 数据导出、$where 注入，分析打点识别、数据库枚举、敏感数据回收、历史 CVE 链与蓝队处置思路。