This thesis consists in the development of an add-on for the OWASP ZAP program, useful for performing a vulnerability analysis of the NoSQL database called CouchDB. CouchDB is a NoSQL database, document type, with documents based on the JSON language and it is written in Erlang. Its main known vulnerabilities are: •??Query injection, which can lead to a password bypass in a login page, if executed in a certain way, but also to the exposure of secret database documents. •??The creation of users with admin privileges, where, thanks to the difference between the JSON parser of Erlang and the one of Javascript, any user can create an administrator profile for the database, leading to the exposure of the whole infrastructure.