hunt-nosqli

Name: hunt-nosqli
Availability: InStock
Author: entrovyx

Detect and exploit NoSQL injection vulnerabilities in MongoDB, CouchDB, and Redis.

3|1|Updated Jul 2, 2026

Search Tags:#security #injection #nosql #mongodb #pentesting #auth-bypass

Ready to run

npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill hunt-nosqli-entrovyx

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hunt-nosqli
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/hunt-nosqli
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill hunt-nosqli-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires nosqlmap.

What problem does it solve?

This skill addresses the difficulty of identifying and exploiting NoSQL injection vulnerabilities in modern web applications that utilize MongoDB, CouchDB, or Redis, which often bypass traditional SQL-based security scanners.

Core Features & Use Cases

Auth Bypass Detection: Automatically tests for authentication bypass primitives using MongoDB operators like $gt and $ne.
Blind Injection Verification: Confirms vulnerabilities through time-based analysis and regex-based data exfiltration.
Use Case: When auditing a Node.js application using Mongoose, use this skill to verify if JSON-based inputs are susceptible to operator injection, potentially leading to unauthorized administrative access or data leaks.

Quick Start

Use the hunt-nosqli skill to test the login endpoint at the target URL for NoSQL injection vulnerabilities using standard operator payloads.

Frequently Asked Questions about hunt-nosqli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I test for NoSQL injection vulnerabilities in a MongoDB environment?▼

To test for NoSQL injection in MongoDB, you systematically apply operator-based payloads like $gt and $ne to JSON-based API endpoints to identify authentication bypass and blind data exfiltration vulnerabilities.

Can I use nosqlmap to detect authentication bypass in Node.js applications?▼

Yes, you can use nosqlmap to detect authentication bypass in Node.js applications by targeting JSON-based inputs and verifying if MongoDB operator injection can lead to unauthorized administrative access.

What is the best way to verify blind NoSQL injection in CouchDB or Redis?▼

The best way to verify blind NoSQL injection in CouchDB or Redis is through time-based response analysis and regex-based data exfiltration to confirm the impact of command injection scenarios.

Does this NoSQL injection testing approach work with JSON-based API endpoints?▼

Yes, this NoSQL injection testing approach works directly with JSON-based API endpoints, targeting operator-based payloads to uncover authentication bypass and data leak vulnerabilities in modern web applications.

Do I need to manually craft payloads to exploit NoSQL injection vulnerabilities?▼

No, you do not need to manually craft payloads to exploit NoSQL injection vulnerabilities because the process systematically tests standard operator payloads to confirm impact through response analysis.

Why do traditional SQL security scanners fail to find NoSQL injection vulnerabilities?▼

Traditional SQL security scanners fail to find NoSQL injection vulnerabilities because they do not understand JSON-based API endpoints or MongoDB operators like $gt and $ne used in authentication bypass scenarios.