← All Challenges
Challenge 61 of 66
NoSQL Ninja
🔴 Elite
Injection
+150 XP
A MongoDB login uses $ne (not equal) operator vulnerability. Bypass authentication by injecting query operators.
Send {"username":{"$ne":""},"password":{"$ne":""}} — matches any non-empty credentials.
🏆 Challenge Complete!
Know someone who would enjoy this? Challenge them.
Keep going
Make it count.
Join free to earn XP for what you read and solve, keep a streak, and track your progress.
Join free