Vulnerability field guide

NoSQL Injection

Switching from SQL to a document database does not remove injection — it changes the syntax. Learn how attacker-controlled types and operators rewrite filters, and how explicit schemas keep query structure on the server.

3 articles14 min totalOverview to advanced techniques
Start here{"$ne": null}
Step 01 · Start with the overview
NoSQL Injection6 min read

NoSQL Injection: When JSON Operators Rewrite a Query

Switching from SQL to a document database does not remove injection — it changes the syntax. Learn how attacker-controlled types and operators rewrite filters, and how explicit schemas keep query structure on the server.

Read the overview
Continue the field guide

NoSQL Injection techniques

2 focused deep-dives
  1. 02Operator InjectionNoSQL Operator Injection: When a Scalar Field Becomes a Filter4 min
  2. 03Server-Side JavaScriptMongoDB JavaScript Injection: Why $where Must Stay Server-Owned4 min