AZ5
MongoDB SCRAM-SHA-1 bruteforcer
-passfile string
location of password file, use '-' for STDIN
-salt string
Salt
-serverkey string
Server Key
-threads int
number of workers per machine (default 8)
-username string
Username
- -passfile Can be S3 bucket path, such as s3://bucket/object, the object must be gzipped.
- -salt and -serverkey must be in their original Base64 encoded format.
Example:
./mongobrute -salt RMsRzAD1ONlZN19sRjqRpw== -username admin -serverkey YsIpaLeJo28RvHXf37Pk4Obe/jE= -passfile dict.txt
The password above should be "admin"