nosqli

A fast NoSQL scanner and injector. For finding sites vulnerable to NoSQL injection, Mongo in particular.

Name:nosqli

Category:Vulnerabilities

Publisher:trickest

Created:9/7/2021

Container:quay.io/trickest/nosqli:6fce3eb

Output Type:

License:Unknown

Source:View Source

Parameters

data · string

--dataSpecify default post data (should not include any injection strings)

https · boolean

--httpsAlways send requests as HTTPS (Defaults to HTTP when using request files)

proxy · string

--proxyProxy requests through this proxy URL.

config · file

--configconfig file

target · string · required

--targetTarget url eg. http://site.com/page?arg=1

request · file

--requestLoad in a request from a file, such as a request generated in Burp or ZAP.

user-agent · string

--user-agentSpecify a user agent