MongoBleed Detector

This extension detects CVE-2025-14847 (MongoBleed), a memory leak vulnerability in MongoDB, by running manual connection tests directly from a dedicated UI tab. It connects to a specified host and port, captures leaked memory data across a configurable byte offset range, and displays the results for inspection.

Features

• Dedicated UI tab for manually configuring host, port, and minimum/maximum byte offsets before running a scan
• Scan output is written to a temporary file rather than heap memory, enabling handling of large leak results
• Results are displayed in both a hex + ASCII view and a plain text view for flexible inspection
• Keyword highlighting automatically marks common secret patterns within the leaked output
• Download Output button exports the full scan results as a .txt file
• Each new scan rotates to a fresh temporary file and discards the previous one, keeping resource usage bounded

Usage

1. Navigate to the MongoBleed tab that appears after loading the extension.
2. Enter the target Host and Port of the MongoDB instance to test.
3. Set the minimum and maximum byte offsets to define the memory range to probe.
4. Click Run Scan to initiate the connection and capture leaked memory data.
5. Review the returned data in the Results table, switching between the Hex/ASCII view and the Text view as needed.
6. Check highlighted entries to quickly identify potential secrets or sensitive patterns in the output.
7. Click Download Output to save the full results as a .txt report to a location of your choice.