KO
|
EN
gitlite β search
Search
#javascript
#python
#hacktoberfest
#react
#ai
#typescript
#llm
#go
#golang
#android
#machine-learning
#rust
#deep-learning
#linux
nosqli-checkr
β 12
Open GitHub β
Automated NoSQLi pentest
Download README (.md)
Explore Similar Repositories
SHU-scheduling-helper
:
π δΈζ΅·ε€§ε¦ζθ―Ύε©ζ(ζδ»Άη) for Chrome (Desktop version only)
AI_course
:
Repository for AI Programming course KCGI Spring Term 2019
node-express-mongo-nodemailer-password-reset-jwt
:
A Node.js back end web application with REST API, user JWT authentication & password reset and MongoDB data storage
dynatrace-service
:
Keptn service to integrate Dynatrace in Keptn
minecraft-chat
:
Minecraft chat client based on React Next.js
// repository documentation
Was this content helpful?
β 0
(0 ratings)
Select Rating:
β
β
β
β
β
Submit Feedback
Recent Feedback
×
Download README
Do you want to download the
README.md
file for
nosqli-checkr
?
Download (.md)
<center> <pre> ββββ βββ βββββββ ββββββββ βββββββ βββ βββ βββββββ βββ βββ ββββββββ βββββββ βββ βββ βββββββ βββββ βββ βββββββββ ββββββββ βββββββββ βββ βββ ββββββββ βββ βββ ββββββββ ββββββββ βββ ββββ ββββββββ ββββββ βββ βββ βββ ββββββββ βββ βββ βββ βββ βββ ββββββββ ββββββ βββ βββββββ ββββββββ ββββββββββ βββ βββ ββββββββ βββββ βββ βββ βββ βββ ββββββββ ββββββ βββ βββββββ ββββββββ βββ ββββββ βββββββββ ββββββββ βββββββββ ββββββββ βββ ββββββββ βββ βββ ββββββββ ββββββββ βββ βββ βββ βββ βββ βββββ βββββββ ββββββββ βββββββ ββββββββ βββ βββββββ βββ βββ ββββββββ βββββββ βββ βββ βββ βββ </pre> </center> The easy way to test NoSQLi in REST APIs ### install ``` npm i -g nosqli-checkr ``` ### Test ``` nosqli-checkr scan --host="https://nosql-checkr-test.herokuapp.com/api/v1/login" --data='{ "user": "wubba", "pass": "" }' --method="post" --params="pass" --error-message='{"success":false,"result":"user/pass not found"}' ``` ### Parameters - `-h or --host`: Route URL. Ex: https://nosql-checkr-test.herokuapp.com/api/v1/login - `-hr or --headers`: Request headers. Ex: token:val or token:val;token2:val2 - `-d or --data`: Request data: Ex: { "user": "wubba", "pass": "" } - `-m or --method`: Request method: Ex: post or POST - `-p or --params`: Request params which will be exploited: Ex: pass or user,pass - `-e or --error-message`: The default error message of request. Ex: {"success":false,"result":"user/pass not found"} ### Result - `Payload`: Is the string used to exploit the request - `Evil data`: The request data with the payload π - `Data stoled`: The result from the request ### Examples - `Headers`: ``` nosqli-checkr scan --host="https://api.com/login" --headers='x-api-key:123;authorization:321' --method="POST" --params="id" --data='{"id":"_test-id_"}' --error-message='{"valid":false,"messsage":"error"}' ``` ### demo [](https://asciinema.org/a/246152)
