NoSQL Injection for Elasticsearch

Gary Drocella

Table of Contents

Introduction

Chapter 1 Installing Elasticsearch

Section 1.1: Install on Mac OSX

Section 1.2: Install on Red hat Linux

Section 1.3: Install on Windows

Chapter 2 Elastic Search Basics

Section 2.1: Document Creation

Section 2.2: Document Retrieval

Section 2.3: Document Update

Section 2.4: Document Delete

Chapter 3 A Vulnerable Web Service using Elasticsearch

Section 3.1: Vulnerable Web service code

Section 3.2: HTML Front-end

Chapter 4 Exploiting the Vulnerable Web Service

Section 4.1: Breaking The Search Form

Section 4.2: Examining the Query

Section 4.3: Exploiting the Web Service

Chapter 5 Securing the Vulnerable Web service

Section 5.1: Preventing NoSQL Injections

Section 5.2: Error Handling

Section 5.3: Hashing and Encrypting Data

Conclusion

References

Introduction

This