GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

Check your WAF before an attacker does

A Python Framework For NoSQL Scanning and Exploitation

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

Using this script, you can enumerate Usernames and passwords of Nosql(mongodb) injecion vulnerable web applications.

Zen protects your Node app against attacks with one line of code. Get peace of mind— at runtime.

Learn how to automate XSS, SSRF, LFI, SQLI, NoSQLi

PyBurp is a Burp Suite extension that provides predefined Python functions for HTTP/WebSocket traffic modification, context menu registration, Intruder payload processing, passive/active scanning, and Collaborator interaction. You can also directly access Montoya API in your Python scripts.

NoSQL Injection Tool to bypass login forms & extract usernames/passwords using regular expressions.

Manipulate a hidden API endpoint to change product pricing using HTTP method tampering and JSON injection, exposing a critical authorization flaw.

Learn what is NoSQL injection and how to find them ?

Protects against common Node.js vulnerabilities in MEAN stack (MongoDB, Node.js).

The Power of Secure Coding Practices: Safeguarding MongoDB Against Exploitation

A automation suite

StealthNoSQL : The Ultimate NoSQL Injection Tool - Unleash the power of advanced NoSQL injection techniques with this comprehensive command-line tool! Whether you’re pentesting MongoDB, CouchDB, or any other NoSQL database, StealthNoSQL has you covered. 🚀💻

Blind noSQL injection case study lab based on CVE-2018-3783

MongoDB injection example

A comprehensive Fastify plugin designed to protect your No(n)SQL queries from injection attacks by sanitizing request data. This plugin provides flexible sanitization options for request bodies, parameters, and query strings.

NoSQLInsanity: Tool for Security Assesment NoSQL (Linear Search VS Binary Search)

Slack integrations and App Development