NOSQL INJECTION EXPLOITATION TECHNIQUES & LABS

Summary from the TLDR InfoSec newsletter

NoSQL injection is a vulnerability where hackers can interfere with queries to NoSQL databases. This can let them bypass authentication, steal or edit data, cause denial of service, or execute server code. NoSQL databases do not use SQL, instead favoring non-relational data formats that open up for injection risks through the lack of standards. This blog dives into the different NoSQL injection techniques and provides labs for readers to try to exploit them.