domains / families / security / nosql-injection

nosql-injection

separate

NoSQL injection playbook. Use when MongoDB-style operators, JSON query objects, flexible search filters, or backend query DSLs may allow data or logic abuse.

When to use

• MongoDB operator injection
• authentication bypass
• blind extraction
• aggregation pipeline injection
• Redis/CouchDB specific attacks
• JSON query object abuse
• flexible search filter abuse
• backend query DSL abuse

When not to use

• SQL injection

Skill page

Source