NoSQL Injection

Walkthrough summary

NoSQL Injection TryHackMe walkthrough with 12 answered prompts and lab methodology notes.

Sample prompts covered

• What is a group of documents in MongoDB is known as?
  Open the walkthrough page to inspect the full answer and command flow.
• Using the MongoDB Operator Reference, what operator is used to filter data when a field isn't equal to a given value?
  Open the walkthrough page to inspect the full answer and command flow.
• Following the example of the 3 documents given before, how many documents would be returned by the following filter: ['gender' => ['$ne' => 'female'] , 'age' => ['$gt'=>'65'] ]?
  Open the walkthrough page to inspect the full answer and command flow.
• What type of NoSQL Injection is similar to normal SQL Injection?
  Open the walkthrough page to inspect the full answer and command flow.
• What type of NoSQL Injection allows you to modify the behaviour of the query, even if you can't escape the syntax?
  Open the walkthrough page to inspect the full answer and command flow.