Skip to content

Latest commit

 

History

History
21 lines (14 loc) · 683 Bytes

README.md

File metadata and controls

21 lines (14 loc) · 683 Bytes

Burp NoSQLi Scanner

Currently Burp doesn't have an engine that detects NoSQL Injection, so I created this plugin to add support
using my preferred language, Java (it's a joke, it's a trap) :D
Happy pentest :)

Limitations

1 - Parallel scanning of multiple parameter at once is not supported for now.
Consequently, at the moment the plugin does not detect derived problems, such as authentication bypass.

2 - No tab in the Burp UI for now.

I'm lazy, but sooner or later I will resolve all two :)

3 - Exploiting is not supported, do it manually if needed.

Building

Refer to BUILD.md for instructions on how to build it from source.