Web Application

NoSQLMap

Automated NoSQL injection testing (MongoDB-focused).

intermediate

Linux

Exploitation

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

Apps using MongoDB/NoSQL with injectable inputs.

Configure target; probe injection; attempt data extraction in lab.

NoSQL injection differs from SQLi — dedicated practice helps.

Commands & usage

python nosqlmap.py

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

ffuf

Fast web fuzzer for directories, vhosts, parameters, and more.

Gobuster

Directory/DNS/vhost brute-forcing tool written in Go.

Feroxbuster

Recursive content discovery tool with smart filtering.

dirsearch

Feature-rich web path scanner in Python.

Wfuzz

Flexible web application fuzzer for params, headers, auth, etc.

Nuclei

Template-based vulnerability scanner with huge community template set.