The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill provides instructions to query internal MongoDB collections such as system.users to extract user roles and password credentials.
[CREDENTIALS_UNSAFE]: It directs the agent to scan the local filesystem for sensitive files, including .env files, Docker environment variables (/proc/1/environ), and application source code to harvest connection strings and secrets.
[DATA_EXFILTRATION]: The instructions facilitate the bulk extraction of database contents using tools like mongodump and mongoexport, enabling the movement of entire datasets to local storage.
[COMMAND_EXECUTION]: The skill makes extensive use of system commands for network scanning, service probing, and brute-force attacks using tools like Nmap and Hydra.
[EXTERNAL_DOWNLOADS]: It provides instructions to download and install the NoSQLMap exploitation tool from its official GitHub repository.

mongodb-attack