Find injection flaws in NoSQL-backed apps.
Guides testing of NoSQL-backed applications for authentication bypass, data extraction, and query injection.
When to use it
Use when MongoDB-style operators, JSON query objects, flexible search filters, or backend query languages may permit data or logic abuse.
It changes how the agent tests NoSQL-backed applications by supplying injection payloads and a testing checklist.
No setup requirements listed.
This skill
Redis
Writes a web shell through Redis
CouchDB
Creates a CouchDB admin account
MongoDB
Server-side JavaScript probes
Writes query results into MongoDB
NoSQL-backed endpoints
Sends injection probes to endpoints