Record successful passwordless access to mongodb

Author: russell

modules/auxiliary/scanner/mongodb/mongodb_login.rb

@@ -46,6 +46,14 @@ def run_host(ip)
           do_login(user, pass)
         }
       else
+        report_vuln(
+          :host         => rhost,
+          :port         => rport,
+          :name         => self.name,
+          :refs         => self.references,
+          :exploited_at => Time.now.utc,
+          :info         => "Mongo server has no authentication."
+        )
         print_good("Mongo server #{ip.to_s} dosn't use authentication")
       end
       disconnect