Skip to content
attack.paths
Sign in
← LibraryTechnique entry
DB-ELASTIC-NOAUTHInitial Access

Elasticsearch / Kibana No-Auth

Default Elasticsearch / Kibana < 7.x with no security plugin — read/write every index, dump all data.

§ Where this technique fits

DB-ELASTIC-NOAUTH is catalogued under the Initial Access tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.