Publicly Accessible Data Storage
Vinny Troia PhD · 2020
This chapter looks at methods for discovering data in several common NoSQL databases like MongoDB, Elasticsearch, and CassandraDB, as well as data located on publicly accessible cloud storage platforms such as Amazon buckets and Digital Ocean spaces. Robot 3T is a free GUI tool used for accessing and working with MongoDB databases. Robot 3T is great for quickly browsing individual MongoDB databases, but trying to quickly view and process tens of thousands of IPs using this method will be impossible. The chapter also looks at a tool called NoScrape, which will help with that function. NoScrape supports easily accessing and downloading data from MongoDB, AWS buckets, Elasticsearch, and CassandraDB. NoScrape also supports scanning for Amazon S3 buckets. The main difference between NoScrape and CloudStorageFinder is the ability to specify authentication for AWS. Using a user's own S3 authentication can prove to be an easy way to find buckets with misconfigured authentication settings.