NoSQLMap

Automated NoSQL injection (MongoDB et al).

KaliParrothigh

pkg: nosqlmap

NoSQLMap finds and exploits NoSQL injection and misconfigurations in MongoDB/CouchDB-style backends.

Syntax

nosqlmap (interactive)

Example

nosqlmap

Set target options, then run NoSQL injection and enumeration modules.

Advantages
  • Fills the NoSQL gap
  • DB enumeration + extraction
Disadvantages
  • Interactive, fiddly
  • Narrow target set
Tags
#nosql#mongodb#database

Official docs: NoSQLMap

Related commands

Frequently asked questions

What is NoSQLMap used for?
NoSQLMap finds and exploits NoSQL injection and misconfigurations in MongoDB/CouchDB-style backends.
What is an example NoSQLMap command?
A common example is: nosqlmap — Set target options, then run NoSQL injection and enumeration modules.
Is NoSQLMap part of Kali Linux?
Yes. NoSQLMap ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install nosqlmap.
What category of security tool is NoSQLMap?
NoSQLMap is a Database Assessment tool with a high-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →