Collaborate Disseminate
Rubrik, the enterprise startup that provides data backup and recovery services across cloud and on-premise environments, is putting some of the funding that it raised last year at a $1.3 billion valuation to use. Rubrik has acquired NoSQL data ba… Continue reading Rubrik acquires Datos IO to expand into NoSQL database management support
NoSQLMap is an open source Python-based automated NoSQL exploitation tool designed to audit for as well as automate injection attacks and exploit default configuration weaknesses in NoSQL databases. It is also intended to attack web applications using NoSQL in order to disclose data from the database. Presently the tool’s exploits are focused…
Read the full post at darknet.org.uk
Continue reading NoSQLMap – Automated NoSQL Exploitation Tool
My apologies if you speak the Queen’s English since that title probably has a whole different meaning to you than I intended. In fact, I’m talking about Git, the version control system. Last time I talked about how the program came to be and offered you a few tutorials. If you are a dyed-in-the-wool software developer, you probably don’t need to be convinced to use Git. But even if you aren’t, there are a lot of things you can do with Git that don’t fit the usual mold.
Git is really good at tracking changes in documents. If …read more
I’m testing a web application and have found a parameter that is vulnerable to NoSQL injection (Elastisearch). The parameter is named username and is the only parameter in the HTTP Request. As a response, I just get a true/fa… Continue reading Elastisearch NoSQL injection implications?
There is a growing trend to utilize more In-Memory Storage for a wide variety of use cases from big data analytics (Spark) to faster processing power (MemSQL) to caching (Redis) most frequently accessed data before making a t… Continue reading In-Memory Database Storage and Security (MemSQL, Spark, Redis, Geode, et al)
There is a growing trend to utilize more In-Memory Storage for a wide variety of use cases from big data analytics (Spark) to faster processing power (MemSQL) to caching (Redis) most frequently accessed data before making a t… Continue reading In-Memory Database Storage and Security (MemSQL, Spark, Redis, Geode, et al)
I am trying to escape the string query in a web app based on pymongo and mongodb. I am able to get the collection names, but I can’t display the content of it, as I am injecting in where clause. Maybe I can try blind?
by fol… Continue reading MongoDB no injection, escape string
MongoDB, the company behind the eponymous open source database, is launching Atlas today, its third major revenue-generating service. Atlas is MongoDB’s database-as-a-service offering that provides users with a managed database service. The service will offer pay-as-you-go pricing and will initially allow users to deploy on Amazon Web Services (AWS), with support for Microsoft Azure… Read More Continue reading MongoDB launches Atlas, its new database-as-a-service offering
Is the injection in a NoSQL database architecture also called SQL injection and is it still part of the OWASP 2013 Top 10, category A1 Injection?
For example, an injection in code that communicates with the following databas… Continue reading Is the injection in a NoSQL database architecture also called SQL injection?
Is the injection in a NoSQL database architecture also called SQL injection and is it still part of the OWASP 2013 Top 10, category A1 Injection?
For example, an injection in code that communicates with the following databas… Continue reading Is the injection in a NoSQL database architecture also called SQL injection?
