MongoDB NoSQL Injection via Aggregation Pipelines!

preview_player
Показать описание
Add parameters like $lookup, $unionWith, and $match to your wordlist for testing. Any errors or hits on these might give a hint to a potential NoSQL injection.

Shout out to Soroush Dalili for this research!
  1. Critical Thinking - Bug Bounty Podcast
Рекомендации по теме
MongoDB NoSQL Injection 0:00:58

MongoDB NoSQL Injection via Aggregation Pipelines!

Why MongoDB Aggregation 0:00:58

Why MongoDB Aggregation Framework Is So Darn Fast

MongoDB in 100 0:02:27

MongoDB in 100 Seconds

spring data mongodb 0:02:59

spring data mongodb remote code execution | cve-2022-22980 poc

078 - NoSQL 1:10:47

078 - NoSQL Injection, Mobile Misconfigurations and a Wormable Windows Bug

Pentesting NoSQL DB’s 0:36:24

Pentesting NoSQL DB’s Using NoSQL Exploitation Framework - Presented By Francis Alexander

NoSQL Data Modeling 1:19:19

NoSQL Data Modeling for the RDBMS Developer

[Segurança] NoSQL Injection 0:13:59

[Segurança] NoSQL Injection existe?

From RDBMS to 0:30:57

From RDBMS to NoSQL at Enterprise Scale

NoSQL Injection 2 0:10:29

NoSQL Injection 2 | Exploiting NoSQL Operator Injection to Bypass Authentication #BugBounty

MongoDB 101: Lesson 0:02:37

MongoDB 101: Lesson 5, Exercise 2 » Exporting a SQL query to the Aggregation Editor

Getting Started with 0:42:43

Getting Started with Jakarta NoSQL and MongoDB | Jakarta Tech Talk | September 15, 2021

NodeJS : Mongoose 0:01:30

NodeJS : Mongoose populate vs aggregate

33 - NoSQL 0:42:40

33 - NoSQL with MongoDB an FireDAC - Part 1

Complete MongoDB Tutorial 1:06:08

Complete MongoDB Tutorial - NoSQL MongoDB Bootcamp & Database Modelling

MongoDB: It's Not 0:33:57

MongoDB: It's Not Just About Big Data

Hacking Meteor.js - 0:56:31

Hacking Meteor.js - A Crater Conf Talk

Getting Started with 0:44:41

Getting Started with Jakarta NoSQL and MongoDB by Michael P. Redlich

Couchbase [SF] 2013: 0:38:52

Couchbase [SF] 2013: When should I use NoSQL?

MongoDB vs SQL 0:09:49

MongoDB vs SQL Databases, NoSQL vs SQL

SQL for MongoDB 0:13:04

SQL for MongoDB

No-Nonsense NoSQL 0:51:10

No-Nonsense NoSQL

How much does 0:00:58

How much does an IT Analyst make?

Getting Started with 0:51:09

Getting Started with Jakarta NoSQL and MongoDB | Michael Redlich (EN)