sql-injection

There are 101 repositories under sql-injection topic.

• sqlmapproject / sqlmap

  Automatic SQL injection and database takeover tool

  databasedetectionexploitationpentestingpythonsql-injectionsqlmaptakeovervulnerability-scanner
  Language:Python 30731

• Hacker0x01 / hacker101

  Source code for Hacker101.com - a free online web and mobile security class.

  educationhackingsecurityhackeronehacker101xssclickjackingcsrfweb-securitysession-fixationunchecked-redirectssql-injectionmobile-securityvulnerability
  Language:SCSS 13615

• digininja / DVWA

  Damn Vulnerable Web Application (DVWA)

  dvwaphpsql-injectionsecuritytraininginfosechacking
  Language:PHP 9435

• chaitin / SafeLine

  一款足够简单、足够好用、足够强的免费 WAF。基于业界领先的语义引擎检测技术，作为反向代理接入，保护你的网站不受黑客攻击。 A free WAF that is sufficiently simple, effective, and powerful. Utilizing industry-leading semantic engine detection technology, it operates as a reverse proxy to protect your website from hacker attacks.

  aclccfirewallhttp-floodsecuritysecurity-toolssql-injectionwafweb-application-firewallweb-securityxsscaptchadockermodsecuritynginx
  Language:C++ 8952

• andresriancho / w3af

  w3af: web application attack and audit framework, the open source web vulnerability scanner.

  scannersecurityappseccross-site-scriptingsql-injection
  Language:Python 4455

• payloadbox / sql-injection-payload-list

  🎯 SQL Injection Payload List

  sql-injectionattackersql-injection-attackssql-injection-proofsql-injection-exploitationsql-injectionssql-injection-payloadsinjection-payloadssql-injection-filterersql-injection-attackowasp-top-10payloadspayloadwebsecuritybugbountysecurity-researchhackingsql-injectinjection-attacksinjection
  4393

• Arachni / arachni

  Web Application Security Scanner Framework

  arachnidomrubyauditdetectionsecurity-auditanalysismodularjavascriptscannersweb-applicationvulnerability-detectioncrawlerscannerhackhackingpenetration-testingxsssql-injection
  Language:Ruby 3654

• 1N3 / IntruderPayloads

  A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

  burpsuiteintruderpayloadsfuzz-listsfuzzingfuzzinjectionburpsuite-engagementburpsuite-intruderattacksql-injectionbugbounty
  Language:BlitzBasic 3553

• reddelexc / hackerone-reports

  Top disclosed reports from HackerOne

  bugbountycsrfhackeroneidorrcereportssecuritysql-injectionssrfwriteupsxssxxe
  Language:Python 3250

• codingo / NoSQLMap

  Automated NoSQL database enumeration and web application exploitation tool.

  nosqlnosql-databasespenetration-testingscannersecurity-auditsecurity-toolssecurity-toolsetoffensive-securityenumerationdatabasesmongodbcouchdbweb-application-securitybugbountyredismongodb-databasesql-injectionhackinghacking-toolhacktoberfest
  Language:Python 2764

• kleiton0x00 / Advanced-SQL-Injection-Cheatsheet

  A cheat sheet that contains advanced queries for SQL Injection of all types.

  cheatsheetmssql-dumpmysql-injectionmysqldumpsqlsql-injection
  2709
• DDoS-Ripper

  palahsu / DDoS-Ripper

  DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic

  ddos-attacksddos-toolddos-attack-toolsddos-protectionddosddos-attack-tooldenial-of-serviceattack-defensedeface-websitehacking-toolshacking-toolddos-ripperddos-attackinternet-trafficprotectionweb-securitysecurityattack-serversql-injectionlinux-tools
  Language:Python 1928

• ron190 / jsql-injection

  jSQL Injection is a Java application for automatic SQL database injection.

  javasql-injectionctf-toolsspring-bootsonarcloudhibernatedockerhackingspockkali-linuxdevopspentest
  Language:Java 1396
• GraphQLmap

  swisskyrepo / GraphQLmap

  GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

  graphqlsql-injectionnosql-injectiongraphql-injectionfuzzpentestctfcapture-the-flaghacktoberfest
  Language:Python 1302

• the-robot / sqliv

  massive SQL injection vulnerability scanner

  sqlisqli-vulnerability-scannersql-injectionscanningscannercrawlerreverse-ip-scanmultiprocessing
  Language:Python 1117

• Janusec / janusec

  JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。

  wafweb-application-firewallapplication-gatewayload-balancegatewayapplication-securitygolangsecurityweb-application-securitysql-injectionjanusec-application-gatewayweb-sshjanusecport-forwardingacmek8s-ingress-controllercookie-bannergslbcookie-compliance
  Language:Go 1109

• utkusen / leviathan

  wide range mass audit toolkit

  pythonsql-injectionbrute-forceexploitationport-scanningservice-discovery
  Language:Python 969

• Ekultek / Zeus-Scanner

  Advanced reconnaissance utility

  google-dorksdork-scanningip-block-bypasscaptcha-bypassadmin-panel-finderxss-scannervulnerability-scannerspgp-keyserversql-injectionport-scannerrecon
  Language:Python 935
• magicRecon

  robotshell / magicRecon

  MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

  subdomainbugbugbounty-toolbugbountyvulnerability-scannersscannertoolinfosecbugbountytricksbash-scriptsubdomains-enumerationxss-vulnerabilitysql-injectionnuclei
  Language:Shell 723

• nim4 / DBShield

  Database firewall written in Go

  sql-injectiondatabasegolangmysqldb2postgresqlmariadboracle
  Language:Go 667

• YagamiiLight / Cerberus

  一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

  hacking-toolsql-injectionxsswafproxymiddlewaressrfpenetration-testingsecurity-toolswebsecuritypythonbypass
  Language:Python 639
• Cracker-Tool

  cracker911181 / Cracker-Tool

  All in One CRACKER911181's Tool. This Tool For Hacking and Pentesting. 🎭

  hackingpython-3pentestpythonshellfacebookwebtoolweb-toolsql-injectionsqlisqlinjectiontermuxtermux-hackingtermux-tooltemp-mailcrackercracker911181cracker-toolcracker911181-toolpentesting
  Language:Python 619

• ning1022 / SQLInjectionWiki

  一个专注于聚合和记录各种SQL注入方法的wiki

  mssqlmysqloraclesql-injectionsqlserverwiki
  Language:JavaScript 564

• chushuai / wscan

  Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.

  crawlerpassive-vulnerability-scannerpocsql-injectionvulnerability-scannerwebscanchromedpheadlesscel-gomartianwscanxsssubdomainstestwafwaf
  Language:Go 451

• Mr-Robert0 / Logsensor

  A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning

  bugbountyloginlogin-automationsql-injectionsql-injection-exploitationsqlisqlinjectionsql-injection-post
  Language:Python 443

• swisskyrepo / DamnWebScanner

  Another web vulnerabilities scanner, this extension works on Chrome and Opera

  extensionlfipluginpolyglot-vectorrcescanssql-injectionweb-vulnerabilities-scannerwebbrowserxss-vulnerability
  Language:Python 436

• zt2 / sqli-hunter

  SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.

  sql-injectiondetectionexploitationrubypentestingvulnerability-scannersqlmap
  Language:Ruby 417

• RisingStack / protect

  Proactively protect your Node.js web services

  securityexpressxsssql-injectionnodejs
  Language:JavaScript 401

• brandonprry / gray_hat_csharp_code

  This repository contains full code examples from the book Gray Hat C#

  sql-injectionfuzzermetasploitpayloadc-sharpautomationdotnetmonoxamarinsecuritynessusopenvasnexposesqlmaparachniclamavcuckoo-sandboxpentestingblueteamredteam
  Language:C# 378

• rizemon / exploit-writing-for-oswe

  Tips on how to write exploit scripts (faster!)

  awaeawae-prepcross-site-scriptingosweoswe-preppythonpython3requestssql-injectionsqliweb-exploitationxss
  361

• JohnTroony / Blisqy

  Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).

  sqlsql-injectionblind-sql-injectionsql-payloadsexploitationdatabase-securityappsecblisqyjohn-ombagi
  Language:Python 331

• OWASP / Vulnerable-Web-Application

  OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber

  vulnerable-web-appwebphpsql-injectionxss-vulnerabilitycommand-executionfile-uploaddirectory-traversalxsssql
  Language:PHP 326

• americo / sqlifinder

  SQL Injection Vulnerability Scanner made with Python

  sqlsql-injectionsql-injection-attacksweb-hackingsecurityscannerhackingvulnerability
  Language:Python 295

• AlaBouali / bane

  The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..

  sql-injectionremote-code-executionremote-command-executioncsrf-scannercors-misconfiguration-scannerinformation-gathering-toolsbruteforce-attackshacking-toolshackingxss-scannerrce-scannerssrf-scannerpath-traversal-scannerddos-attackspenetration-testingpentesting-pythonbotnet-toolscms-vulns-finderbotnetsvulnerability-scanners
  Language:Python 271

• clouedoc / AutoSQLi

  An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.

  pythontorsqlmapwafsql-injectionwebsites-vulnerabledork-scanningautomatedinfoseccyberwarl33tosint
  Language:Python 263

• presidentbeef / inject-some-sql

  Have fun injecting SQL into a Ruby on Rails application!

  securityrubysql-injectionrailssqliruby-on-rails
  Language:Ruby 249