Nosqli

Description

--- description: NoSQL injection scanner (MongoDB/Mongoose/operator-injection DBs) — auth bypass via $ne/$gt operators, bracket-syntax query injection, $where time-based blind. Usage: /nosqli --login <url> --user-field email --pass-field password --- # /nosqli Test JSON/operator-style NoSQL injection — the "db" attack surface web2 SQLi tools miss. Turns an equality check (`{user: X, pass: Y}`) into "match anything" via operator injection → auth bypass / data read. ## Usage ``` /nosqli --logi

Installation

Installs to ~/.claude/skills/awarexone-agentic-bug-hunter-nosqli/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.