hunt-nosqli

Identify and exploit NoSQL injection vulnerabilities in MongoDB, CouchDB, and Redis.

3.3k|507|Updated May 5, 2026

Search Tags:#redis #mongodb #red-team #security-testing #couchdb #nosql-injection #nosqli

Ready to run

npx skills add https://github.com/elementalsouls/Claude-BugHunter --skill hunt-nosqli

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hunt-nosqli
Source: https://github.com/elementalsouls/Claude-BugHunter/tree/main/skills/hunt-nosqli
Command: npx skills add https://github.com/elementalsouls/Claude-BugHunter --skill hunt-nosqli

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify and exploit NoSQL injection vulnerabilities across MongoDB, CouchDB, and Redis by leveraging operator injections such as $where, $regex, $gt, and $ne, enabling authentication bypass and data exfiltration during authorized testing.

Core Features & Use Cases

Operator injection techniques for MongoDB: $where, $regex, $gt, $ne; NoSQLi payloads to bypass login and enumerate data.
Redis and CouchDB exposure patterns: command injection via misconfigured endpoints and exposed admin UI; data dumping workflows.
Real-world scenarios include authenticated bypass in MongoDB-backed apps and data extraction from user collections.

Quick Start

Initiate an authorized NoSQL injection test against a target using MongoDB, CouchDB, or Redis to validate vulnerability presence.

Frequently Asked Questions about hunt-nosqli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I bypass authentication using NoSQL injection in MongoDB?▼

You can bypass MongoDB authentication using NoSQL injection by injecting operators like $ne (not equal) or $gt (greater than) to force true comparisons. This Skill contains workflows and payloads to bypass login forms and enumerate user collections in Mongoose-backed applications.

What is a $where operator injection and how does it work in NoSQL databases?▼

A $where operator injection in NoSQL databases evaluates JavaScript expressions server-side to manipulate query logic. This Skill identifies $where, $regex, and $ne injection patterns to detect vulnerabilities and extract data from MongoDB and CouchDB targets.

Can I test for Redis and CouchDB command injection using automated payloads?▼

Yes, you can test Redis and CouchDB command injection using targeted payloads for misconfigured endpoints and exposed admin UIs. This Skill provides data dumping workflows and detection patterns for these specific NoSQL environments.

Does this NoSQL injection testing approach work with Mongoose and Node.js applications?▼

Yes, this NoSQL injection testing approach works with Mongoose and Node.js applications by targeting MongoDB operator injections. It provides workflows to validate vulnerability presence in Mongoose-backed apps through authentication bypass and data enumeration scenarios.

What is the best way to detect NoSQL injection vulnerabilities across different databases?▼

The best way to detect NoSQL injection vulnerabilities across MongoDB, CouchDB, and Redis is by analyzing error messages and injecting operator payloads like $regex and $where. This Skill encapsulates detection patterns and safe testing guidance for authorized auditing.

When should I not use NoSQL injection techniques during security testing?▼

You should not use NoSQL injection techniques without explicit authorization, as they enable data exfiltration and authentication bypass. This Skill emphasizes safe, auditable testing and is strictly for validating vulnerability presence in authorized targets.