NoSQL Injection Wordlists

NoSQL Injection Wordlists is a collection of payloads for testing NoSQL injections.

When I started pentesting applications using MongoDB, Cassandra and other NoSQL databases, I realized there were no good wordlists. The ones around were poor, very poor.

What’s in it

Hundreds of payloads for MongoDB, Cassandra, CouchDB, Redis and many more.

Who uses it

It has over 370 stars and pentesters around the world use it. I’ve seen bug bounty reports that found critical vulnerabilities with these wordlists.

Once a guy wrote to me saying he’d found a $50,000 vulnerability with these payloads. He didn’t give me a commission, but the thanks was enough.