webeasy

Mongo 1

spbctf

Task: Login form with MongoDB backend. Solution: NoSQL injection using $ne operator to bypass authentication by injecting query operators through form parameters.

$ ls tags/ techniques/
nosql_injection_ne_operatormongodb_query_operator_injection

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]