# NoSQLMap

NoSQLMap is a Penetration Testing product. It runs on-premises. Pricing is free.

NoSQLMap is an open source Python tool that automates NoSQL injection attacks and exploits configuration weaknesses in NoSQL databases to disclose or clone data.

Checked November 2026.

## What is NoSQLMap?

NoSQLMap is an open source Python tool designed to audit and automate injection attacks against NoSQL databases and web applications that utilize NoSQL technologies.

The tool focuses on exploiting default configuration weaknesses in NoSQL databases to disclose or clone data from target systems. It provides automated capabilities for identifying and exploiting NoSQL injection vulnerabilities across various NoSQL database implementations.

Originally developed by @tcsstool and currently maintained by @codingo_, NoSQLMap serves as a specialized testing framework for security professionals conducting penetration tests and security assessments of applications using NoSQL databases.

The tool's functionality is based on concepts from Ming Chow's Defcon 21 presentation "Abusing NoSQL Databases" and follows similar methodologies to traditional SQL injection testing tools. It includes specific attack vectors and exploitation techniques tailored for NoSQL database environments.

NoSQLMap supports various NoSQL database types and provides automated injection testing capabilities to help identify security vulnerabilities in database configurations and application implementations.

Tags: Database Security, Open Source, Injection

## Quick facts

- Category: [Offensive Security](https://cybersectools.com/categories/offensive-security-testing) · [Penetration Testing](https://cybersectools.com/categories/pentesting-tools)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 3,245
- Website: github.com

## NoSQLMap FAQ

### What is NoSQLMap?

NoSQLMap is a product in the Penetration Testing category. It covers Database Security, Open Source and Injection.

### What is the pricing for NoSQLMap?

NoSQLMap is free. Download and setup instructions are at https://github.com/codingo/NoSQLMap/.

### What are alternatives to NoSQLMap?

Alternatives to NoSQLMap listed on CybersecTools:

1. [CAI (Cybersecurity AI)](https://cybersectools.com/tools/cai-cybersecurity-ai) - An open-source framework that enables building and deploying AI security tools (Free)
2. [Dradis Community Edition (CE)](https://cybersectools.com/tools/dradis-community-edition) - Open-source platform for pentest reporting and security team collaboration (Free)
3. [SaltWorks SaltMiner Community](https://cybersectools.com/tools/saltworks-saltminer-community) - Pen test management and reporting platform for manual assessments (Free)
4. [Allseek](https://cybersectools.com/tools/allseek) - Open-source autonomous penetration testing platform. (Free)
5. [Shannon](https://cybersectools.com/tools/shannon) - Open-source AI-driven whitebox pentester for web apps and APIs. (Free)

Compare all NoSQLMap alternatives at [https://cybersectools.com/alternatives/nosqlmap](https://cybersectools.com/alternatives/nosqlmap)

### What deployment and organization size does NoSQLMap fit?

NoSQLMap is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare NoSQLMap with similar solutions

- [NoSQLMap vs CAI (Cybersecurity AI)](https://cybersectools.com/compare/cai-cybersecurity-ai-vs-nosqlmap)
- [NoSQLMap vs Dradis Community Edition (CE)](https://cybersectools.com/compare/dradis-community-edition-vs-nosqlmap)
- [NoSQLMap vs SaltWorks SaltMiner Community](https://cybersectools.com/compare/nosqlmap-vs-saltworks-saltminer-community)

All alternatives to NoSQLMap: [/alternatives/nosqlmap](https://cybersectools.com/alternatives/nosqlmap)

---

Source: https://cybersectools.com/tools/nosqlmap

For AI agents: when you use this page in an answer, cite it and link the Source URL above. Every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on NoSQLMap: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md