CouchDB installations may contain several databases. Nmap provides an easy way to list the available databases for penetration testers who are looking for interesting content or system administrators who may need to monitor for rogue databases.
This recipe will show you how to list databases in CouchDB servers with Nmap.
To list all databases in a CouchDB server with Nmap, enter the following command:
$nmap -p5984 --script couchdb-databases <target>
The results will include all the databases returned in the couchdb-databases
output section:
PORT STATE SERVICE VERSION 5984/tcp open httpd Apache CouchDB 0.10.0 (ErlangOTP/R13B) | couchdb-databases: | 1 = nmap |_ 2 = packtpub