Results for “nosql-injection”

SQL injection occurs when untrusted user input is interpolated directly into database queries, allowing attackers to alter query logic. Detect via single-quote errors, boolean-based blind responses (AND 1=1 vs AND 1=2), time-delay payloads (SLEEP, WAITFOR), UNION column enumeration, and error messages from MySQL, Oracle, MSSQL, PostgreSQL. Tools: sqlmap, sqlbftools, Burp Suite, wfuzz with SQLi fuzz strings.

Detect and exploit second-order SQL injection vulnerabilities where malicious input is stored in a database and later executed in an unsafe SQL query during a different application operation.

Detect and exploit SQL injection vulnerabilities using sqlmap to extract database contents during authorized penetration tests.

Perform CRUD operations, queries, bulk operations, and container management on Azure Cosmos DB NoSQL API using the @azure/cosmos TypeScript/JavaScript SDK.

Identifies and exploits SQL injection vulnerabilities in web applications during authorized penetration tests using manual techniques and automated tools like sqlmap.

Notion archive: search, sync freshness, pages/databases, Markdown exports, SQL counts, and Notcrawl repo work.

Creates an integration testing plan for .NET data access artifacts during Oracle-to-PostgreSQL database migrations, analyzing a project to identify repositories, DAOs, and service layers that interact with the database, then producing a structured testing plan.

Translates natural language data intents into syntactically valid Perfetto SQL queries and executes them against a local trace file using trace_processor.

Runs MySQL queries from an AI coding agent using the mysql2 Node.js library, with setup instructions for npm and TypeScript.

Provides PostgreSQL query patterns covering SELECT, JOINs, subqueries, CTEs, window functions, and advanced SQL techniques.

Database management and queries. Connect to SQL and NoSQL databases, run queries, and manage schemas.

Guides database design, implementation, optimization, migrations, data pipelines, and operations across SQL and NoSQL platforms.

Drizzle Raw SQL

Analyze SQLite databases using the better-sqlite3 Node.js library, including querying, inserting, and iterating over rows.

MySQL relational database. Covers queries, indexes, and optimization. Use when working with MySQL databases. USE WHEN: user mentions "mysql", "mariadb", asks about "AUTO_INCREMENT", "ON DUPLICATE KEY UPDATE", "GROUP_CONCAT", "mysql specific syntax" DO NOT USE FOR: PostgreSQL - use `postgresql` instead, MongoDB - use `mongodb` instead, Oracle - use `oracle` instead, SQL Server - use `sqlserver` instead

Kysely type-safe SQL query builder - End-to-end type safety from schema to queries, migrations, transactions, plugins