NoSQLMap
NoSQLMap is an open source Python tool that automates NoSQL injection attacks and exploits configuration weaknesses in NoSQL databases to disclose or clone data.
NoSQLMap is an open source Python tool that automates NoSQL injection attacks and exploits configuration weaknesses in NoSQL databases to disclose or clone data.
Checked November 2026.
NoSQLMap is an open source Python tool designed to audit and automate injection attacks against NoSQL databases and web applications that utilize NoSQL technologies.
The tool focuses on exploiting default configuration weaknesses in NoSQL databases to disclose or clone data from target systems. It provides automated capabilities for identifying and exploiting NoSQL injection vulnerabilities across various NoSQL database implementations.
Originally developed by @tcsstool and currently maintained by @codingo_, NoSQLMap serves as a specialized testing framework for security professionals conducting penetration tests and security assessments of applications using NoSQL databases.
The tool's functionality is based on concepts from Ming Chow's Defcon 21 presentation "Abusing NoSQL Databases" and follows similar methodologies to traditional SQL injection testing tools. It includes specific attack vectors and exploitation techniques tailored for NoSQL database environments.
NoSQLMap supports various NoSQL database types and provides automated injection testing capabilities to help identify security vulnerabilities in database configurations and application implementations.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about NoSQLMap: features, pricing and alternatives.
NoSQLMap is a product in the Penetration Testing category. It covers Database Security, Open Source and Injection.
NoSQLMap is free. Download and setup instructions are at https://github.com/codingo/NoSQLMap/.
Alternatives to NoSQLMap listed on CybersecTools:
Compare all NoSQLMap alternatives at https://cybersectools.com/alternatives/nosqlmap
NoSQLMap is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
ID-spoofing NFS client
A proof-of-concept toolkit for fingerprinting and exploiting Amazon Web Services cloud infrastructures using the boto library.
Autonomous pentesting platform for internal, external, cloud & K8s testing
AI-driven continuous penetration testing platform with automated remediation.
A modular and script-friendly multithread bruteforcer for managing task parameters in Python scripts.
A Python utility that identifies and exploits domains vulnerable to AWS name server takeover attacks by detecting misconfigured DNS settings.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,032 products.
Connect your AI
