NoSQLmap

python nosqlmap.py -t <url>

NoSQL injection exploitation tool (MongoDB, CouchDB, etc.) for data extraction.

When you detect the application uses a NoSQL database (e.g., by JSON usage in requests or responses). NoSQLMap automates detection and exploitation of injection in parameters, similar to sqlmap but for NoSQL. Useful for extracting data from collections and users.

If the target does not use NoSQL or if parameters are properly sanitized. Also, if the injection is highly complex, manual testing with custom scripts may be more efficient.