Making Mongo Cry: Automated NoSQL exploitation with NoSQLMap

No ratings

Presented at BSidesNashville 2014 by

Russell Butturini

This presentation will discuss some of the inherent security flaws and weaknesses in NoSQL databases, with a particular interest and focus on MongoDB. The presentation will examine how NoSQL databases work, where configuration weaknesses exist "out of the box", and how web applications using NoSQL backends can be exploited. NoSQLMap, a Python tool written for automatically stealing data from NoSQL databases and applications, will also be demoed.