Avatar

Labs / MongoDB Injector

  • Daily Challenge
  • Released 05 Sep 2025

🍃 Can you exploit NoSQL queries to bypass their document database security?

A modern user management system relies on MongoDB for secure data storage, implementing document-based authentication and user profiles. But when JSON queries meet insufficient input sanitization, even the most flexible NoSQL databases can become vulnerable to injection attacks. 🎯 Time to test your NoSQL exploitation skills against cutting-edge database technology!

1
Flags
1
Points
Daily Challenge
Free Access
Start Lab Environment

Launch your dedicated AWS machine to begin hacking

~1-2 min setup
AWS dedicated
Private instance
Industry standard
No Community Writeups Yet

Be the first to share your writeup for this lab!