nosql-injection

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

Check your WAF before an attacker does

A Python Framework For NoSQL Scanning and Exploitation

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

Zen protects your Node app against attacks with one line of code. Get peace of mind— at runtime.

Using this script, you can enumerate Usernames and passwords of Nosql(mongodb) injecion vulnerable web applications.

Learn how to automate XSS, SSRF, LFI, SQLI, NoSQLi

PyBurp is a Burp Suite extension that provides predefined Python functions for HTTP/WebSocket traffic modification, context menu registration, Intruder payload processing, passive/active scanning, and Collaborator interaction. You can also directly access Montoya API in your Python scripts.

NoSQL Injection Tool to bypass login forms & extract usernames/passwords using regular expressions.

SQLGuardJS is Express request verification for SQL injection, XSS, and NoSQL injection with heuristic detection, schema checks, structured logging, and a secure router API.

Manipulate a hidden API endpoint to change product pricing using HTTP method tampering and JSON injection, exposing a critical authorization flaw.

Learn what is NoSQL injection and how to find them ?

Protects against common Node.js vulnerabilities in MEAN stack (MongoDB, Node.js).

The Power of Secure Coding Practices: Safeguarding MongoDB Against Exploitation

👻 GHOST - Web Pentest Framework | "Alone and on the prowl" | Reconhecimento, detecção e exploração de vulnerabilidades web em Python 🚀

A automation suite

Archived — superseded by Stealthix ( https://github.com/ImKKingshuk/Stealthix ), the unified SQL/NoSQL/NewSQL security toolkit.

Blind noSQL injection case study lab based on CVE-2018-3783

DBEclipse is a comprehensive NoSQL security testing framework designed for security professionals, penetration testers, and ethical hackers.

MongoDB injection example