Examples of (No-)SQL Injections in Nodejs

Public/protected APIs for a movie database, built with Node.js, express and mongoDb.

The Backend Storage 🏬 Repository is a collection of resources and solutions for managing and storing data on the backend. This repository covers a range of storage solutions, including Relational databases, NoSQL databases, object storage, file storage, and cache storage.

A robust and secure Express.js boilerplate with TypeScript, featuring advanced security middleware, MongoDB integration, and tools for building production-ready Node.js apps.

In this challenge, I hack a target machine by first scanning it, then exploiting an ARM-based IP camera to get in. Break out of a restricted environment and use a NoSQL injection to take over a web dashboard using Nmap, FFUF, Burp Suite, and a Python exploit script.

An Express.js middleware library to automatically sanitize JSON bodies for use with MongoDB libraries.

❄️ Master the "Snowy ARMageddon" challenge with this detailed walkthrough, designed for attackers using Kali/BlackArch on TryHackMe.

Multi-database NoSQL injection scanner supporting MongoDB, Redis, Cassandra, and Elasticsearch with 150+ attack payloads and database cloning.

NoSql injection

NoSQL Lab Specifically Designed for Cyber Security Learners (Only for Education Purposes)

DistilBERT-based NoSQL Injection Payload Detection Model

F-14 Tomcat: An advanced, high-speed NoSQL injection framework. Features WAF evasion (JA3/TLS impersonation), binary search extraction, and auto-authentication.

This is my final project for the Web Security and Application course at my university with a team 4 members.

MongoDB Blind NoSQL Injection tool.

Slack integrations and App Development

This repository contains a web app that helps to understand NoSQL injection and how to protect websites against it

BuggyBuy: Deliberately Vulnerable MERN Stack Web Application for Security Testing

NoSQLInsanity: Tool for Security Assesment NoSQL (Linear Search VS Binary Search)

Blind noSQL injection case study lab based on CVE-2018-3783