NoSQL Injection Protection

Protection Module: NoSqlInjection

Prevents NoSQL injection attacks through query analysis and input validation.

Available for:

How It Works

NoSQL Injection Protection analyzes queries to NoSQL databases to detect injection attempts.

Detection Methods:

Operator Injection Detection - Identifies malicious operators ($where, $ne, etc.)
JavaScript Injection - Detects JS code in MongoDB queries
Query Structure Analysis - Validates query patterns
JSON Payload Validation - Identifies malformed JSON attacks
Type Confusion Detection - Detects type-based injection

Supported Databases:

JSON

{
  "protections": {
    "NoSqlInjection": {
      "enabled": true,
      "action": "block"
    }
  }
}

{
  "protections": {
    "NoSqlInjection": {
      "enabled": true,
      "action": "block"
    }
  }
}

builder.Services.AddBytehideMonitor(monitor => monitor
    .WithProtection(ProtectionModuleType.NoSqlInjection, ActionType.Block)
);

builder.Services.AddBytehideMonitor(monitor => monitor
    .WithProtection(ProtectionModuleType.NoSqlInjection, ActionType.Block)
);

JavaScript

// Input: { "username": { "$ne": null } }
// Status: BLOCKED

// Input: { "username": { "$ne": null } }
// Status: BLOCKED

JavaScript

// Input: { "username": "'; return true; var dummy='1" }
// Status: BLOCKED

// Input: { "username": "'; return true; var dummy='1" }
// Status: BLOCKED

JSON

// Input: { "price": { "$gt": "" } }
// Status: BLOCKED

// Input: { "price": { "$gt": "" } }
// Status: BLOCKED

Configure responses