GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

Check your WAF before an attacker does

A Python Framework For NoSQL Scanning and Exploitation

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

Using this script, you can enumerate Usernames and passwords of Nosql(mongodb) injecion vulnerable web applications.

Learn how to automate XSS, SSRF, LFI, SQLI, NoSQLi

Zen by Aikido protects your node app against attacks with one line of code. Get peace of mind— at runtime.

NoSQL Injection Tool to bypass login forms & extract usernames/passwords using regular expressions.

PyBurp Allows you to modify Burp Suite proxy requests and responses with simple Python code, supports remote invocation of encryption and decryption methods in browsers or apps, greatly facilitating security professionals in performing security testing on encrypted HTTP request and response transactions.

Learn what is NoSQL injection and how to find them ?

The Power of Secure Coding Practices: Safeguarding MongoDB Against Exploitation

Protects against common Node.js vulnerabilities in MEAN stack (MongoDB, Node.js).

A automation suite

Blind noSQL injection case study lab based on CVE-2018-3783

MongoDB injection example

A comprehensive Fastify plugin designed to protect your No(n)SQL queries from injection attacks by sanitizing request data. This plugin provides flexible sanitization options for request bodies, parameters, and query strings.

Slack integrations and App Development

This repository contains a web app that helps to understand NoSQL injection and how to protect websites against it

NoSQLInsanity: Tool for Security Assesment NoSQL (Linear Search VS Binary Search)

NoSql injection