Hello everyone. I saw how to make a noslq injection work in modngodb via POST but it seems that if the data is passed with a GET the injection does not work. Have any news about it?
Example : curl -s -X POST http://127.0.0.1:3000/api/v1/userdata -H ‘Content-Type: application/json’ -d ‘{“username”: {“$gt”: “”}}’ | jq this one is ok if nodejs application takes data via POST. But if application uses GET with req.query or req.params I didn’t understand how to create the URL. Command like thiscurl http://127.0.0.1:3000/api/v1/userdata?username[$regex]=.* (username is the param) didn.t work. Thanks in advance.