A MongoDB installation may store several databases. Listing databases is useful to both system administrators and penetration testers, and there is an NSE script to do this easily. This is especially handy when we don't have a client at our disposal.
This recipe describes how to use Nmap to list databases in MongoDB.
To list MongoDB databases, enter the following command:
$ nmap -p27017 --script mongodb-databases <target>
The databases will be shown in the script output section:
PORT STATE SERVICE 27017/tcp open mongodb | mongodb-databases: | ok = 1 | databases | 1 | empty = true | sizeOnDisk = 1 | name = local | 0 | empty = true | sizeOnDisk = 1 | name = admin | 3 | empty = true | sizeOnDisk = 1 | name = test | 2 | empty = true | sizeOnDisk = 1 | name = nice%20ports%2C |_ totalSize = 0