CouchDB Pentesting

Apache CouchDb is a document-oriented NoSQL database. Default ports are 5984, 6984.

Directories

# List all databases
/_all_dbs

# Show information of the database
/<db_name>

# Futon administration interface
/_utils/
# Temporary View
/_utils/database.html?<database_name>/_temp_view

Basic Operations

# Create a new database
curl -X PUT https://example.com:5984/<new_database_name>

# Delete a database
curl -X DELETE https://example.com:5984/<database_name>