---
title: "Discussion on \"NoSQL Injection\" | Hashnode"
description: "Discussion on \"NoSQL Injection\". Basic authentication bypass\nUsing not equal ($ne) or greater ($gt)\nIn PHP you can send an Array changing the sent parameter from parameter=foo to parameter[arrName]=foo.\nThe exploits are based in adding an Operator:\n#in URL\nusername[$ne]=toto&passwor..."
url: "https://hashnode.com/posts/nosql-injection/66ce87c932b10c903aa189f8"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [NoSQL Injection](https://itsecurenep.hashnode.dev/nosql-injection?utm_source=hashnode&utm_medium=feed)

Basic authentication bypass Using not equal ($ne) or greater ($gt) In PHP you can send an Array changing the sent parameter from parameter=foo to parameter\[arrName\]=foo. The exploits are based in adding an Operator: #in URL username\[$ne\]=toto&passwor...

Aug 28, 2024 · 4 min read · itsecurenep.hashnode.dev  
Read the article

-   [#nosql-injection](https://hashnode.com/tag/nosql-injection)
-   [#bug-hunting](https://hashnode.com/tag/bug-hunting)
-   [#penetration-testing](https://hashnode.com/tag/penetration-testing)

## Written by

[Prasnjit Kumar sharma](https://hashnode.com/@Prasnjit1905060)

@Prasnjit1905060 · Pune, India

  
[View profile](https://hashnode.com/@Prasnjit1905060)

IT professional

I am Prasnjit Kumar Sharma from Madhubani Bihar. I have completed my B. Tech IT from Sri Ramakrishna engineering college and I have done specialization on Threat handling and risk analysis. Currently, i am working with the L&T Technology on the connected security framework project, and recently I have completed my CISSP(Certified Information System Security Professional) certification from simplilearn. Along with this, now I am a candidate of (ISC)2.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.