Portswigger - NoSQL injection - Lab #4 Exploiting NoSQL operator injection to extract unknown field

Similar Tracks
Portswigger - API Testing - Lab #2 Exploiting server side parameter pollution in a query string
Popo Hack
Portswigger - API Testing - Lab #5 Exploiting server side parameter pollution in a REST URL
Popo Hack
Portswigger - Information Disclosure - Lab #5 Information disclosure in version control history
Popo Hack