webmedium

Документальный архив (Documentary Archive)

hackerlab

Task: NoSQL Document Store with JSON API search endpoint. Solution: Used $or operator to bypass ACL filter and access hidden document, then blind NoSQL injection with $regex to extract flag from hidden field character-by-character.

$ ls tags/ techniques/
pythonaccess_control_bypassmongodbjson_apinosql_injectionblind_injectionbasehttp
nosql_or_operator_acl_bypassblind_regex_data_exfiltrationfield_name_enumerationcharacter_by_character_extraction
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]