snag.page

Every check · Open services

Open databases

services/databases · What it finds is shown only to the site's owner.

What it checks

Ports 6379 (Redis), 27017 (MongoDB), 9200 (Elasticsearch), 5984 (CouchDB), 11211 (Memcached), 3306 (MySQL), 5432 (PostgreSQL), 1433 (SQL Server), 1521 (Oracle), 9300 (Elasticsearch nodes), 9042 (Cassandra), 8086 (InfluxDB), 7474 (Neo4j), 5672 (RabbitMQ), 9092 (Kafka), 2181 (ZooKeeper).

Why it matters

Anyone can try passwords against one, and one without a password can be read, changed or wiped.

How to fix it

  1. Find what listens on each port on the server.
  2. Close the port in your firewall, or bind the database to 127.0.0.1 or a private network.
  3. If another server needs it, allow only that server's address.
  4. Look in the database's logs for connections you don't recognise.

Check a site for this and everything else: snag.page. More on open services: Open services Open remote access Open container APIs Known flaws