← LibraryTechnique entry
DB-ELASTIC-NOAUTHInitial Access
Elasticsearch / Kibana No-Auth
Default Elasticsearch / Kibana < 7.x with no security plugin — read/write every index, dump all data.
§ Where this technique fits
DB-ELASTIC-NOAUTH is catalogued under the Initial Access tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.