---
meta:
  author: csanders-git
  description: None
  enabled: true
  name: 942290.yaml
tests:
  - test_title: 942290-1
    desc: Test as described in http://www.client9.com/article/five-interesting-injection-attacks/
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            method: GET
            port: 80
            uri: /mongo/show.php?u_id[$ne]=2
            headers:
              User-Agent: ModSecurity CRS 3 Tests
              Host: localhost
          output:
            log_contains: id "942290"
  - test_title: 942290-2
    desc: "basic MongoDB SQL injection attempts"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: GET
            port: 80
            uri: "/?mongoQ=%5b%24lte%5dasdfsd"
            version: HTTP/1.0
          output:
            log_contains: id "942290"
