NoSQL Injection Wordlists

Payloads ⭐ 370 stars

NoSQL Injection Wordlists is the most complete collection of payloads for testing NoSQL Injections you’ll find.

When I started pentesting applications using MongoDB, Cassandra, and other NoSQL databases, I realized there were no good wordlists.

The ones available were poor. Very poor.

What’s included?

Hundreds of payloads for:

  • MongoDB
  • Cassandra
  • CouchDB
  • Redis
  • And many more

Real impact

+370 stars and used by pentesters worldwide.

I’ve seen bug bounty reports that used these wordlists to find critical vulnerabilities.

Once a guy wrote to me saying he’d found a $50,000 vulnerability using these payloads. He didn’t give me a commission, but the thanks was enough.