sql-injection

There are 100 repositories under sql-injection topic.

• sqlmapproject / sqlmap

  Automatic SQL injection and database takeover tool

  databasedetectionexploitationpentestingpythonsql-injectionsqlmaptakeovervulnerability-scanner
  Language:Python 30498

• Hacker0x01 / hacker101

  Source code for Hacker101.com - a free online web and mobile security class.

  clickjackingcsrfeducationhacker101hackeronehackingmobile-securitysecuritysession-fixationsql-injectionunchecked-redirectsvulnerabilityweb-securityxss
  Language:SCSS 13596

• digininja / DVWA

  Damn Vulnerable Web Application (DVWA)

  dvwaphpsql-injectionsecuritytraininginfosechacking
  Language:PHP 9287

• chaitin / SafeLine

  一款足够简单、足够好用、足够强的免费 WAF。基于业界领先的语义引擎检测技术，作为反向代理接入，保护你的网站不受黑客攻击。 A free WAF that is sufficiently simple, effective, and powerful. Utilizing industry-leading semantic engine detection technology, it operates as a reverse proxy to protect your website from hacker attacks.

  aclcaptchaccdockerfirewallhttp-floodmodsecuritynginxsecuritysecurity-toolssql-injectionwafweb-application-firewallweb-securityxss
  Language:C++ 8534

• andresriancho / w3af

  w3af: web application attack and audit framework, the open source web vulnerability scanner.

  appseccross-site-scriptingscannersecuritysql-injection
  Language:Python 4443

• payloadbox / sql-injection-payload-list

  🎯 SQL Injection Payload List

  sql-injectionattackersql-injection-attackssql-injection-proofsql-injection-exploitationsql-injectionssql-injection-payloadsinjection-payloadssql-injection-filterersql-injection-attackowasp-top-10payloadspayloadwebsecuritybugbountysecurity-researchhackingsql-injectinjection-attacksinjection
  4299

• Arachni / arachni

  Web Application Security Scanner Framework

  arachnidomrubyauditdetectionsecurity-auditanalysismodularjavascriptscannersweb-applicationvulnerability-detectioncrawlerscannerhackhackingpenetration-testingxsssql-injection
  Language:Ruby 3639

• 1N3 / IntruderPayloads

  A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

  burpsuiteintruderpayloadsfuzz-listsfuzzingfuzzinjectionburpsuite-engagementburpsuite-intruderattacksql-injectionbugbounty
  Language:BlitzBasic 3538

• reddelexc / hackerone-reports

  Top disclosed reports from HackerOne

  writeupshackeronebugbountyreportsxssxxesql-injectioncsrfidorrcessrfsecurity
  Language:Python 3181

• codingo / NoSQLMap

  Automated NoSQL database enumeration and web application exploitation tool.

  nosqlnosql-databasespenetration-testingscannersecurity-auditsecurity-toolssecurity-toolsetoffensive-securityenumerationdatabasesmongodbcouchdbweb-application-securitybugbountyredismongodb-databasesql-injectionhackinghacking-toolhacktoberfest
  Language:Python 2755

• kleiton0x00 / Advanced-SQL-Injection-Cheatsheet

  A cheat sheet that contains advanced queries for SQL Injection of all types.

  sqlcheatsheetsql-injectionmysqldumpmysql-injectionmssql-dump
  2665
• DDoS-Ripper

  palahsu / DDoS-Ripper

  DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic

  ddos-attacksddos-toolddos-attack-toolsddos-protectionddosddos-attack-tooldenial-of-serviceattack-defensedeface-websitehacking-toolshacking-toolddos-ripperddos-attackinternet-trafficprotectionweb-securitysecurityattack-serversql-injectionlinux-tools
  Language:Python 1884

• ron190 / jsql-injection

  jSQL Injection is a Java application for automatic SQL database injection.

  javasql-injectionctf-toolsspring-bootsonarcloudhibernatedockerhackingspockkali-linuxdevopspentest
  Language:Java 1384
• GraphQLmap

  swisskyrepo / GraphQLmap

  GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

  graphqlsql-injectionnosql-injectiongraphql-injectionfuzzpentestctfcapture-the-flaghacktoberfest
  Language:Python 1281

• the-robot / sqliv

  massive SQL injection vulnerability scanner

  sqlisqli-vulnerability-scannersql-injectionscanningscannercrawlerreverse-ip-scanmultiprocessing
  Language:Python 1113

• Janusec / janusec

  JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。

  wafweb-application-firewallapplication-gatewayload-balancegatewayapplication-securitygolangsecurityweb-application-securitysql-injectionjanusec-application-gatewayweb-sshjanusecport-forwardingacmek8s-ingress-controllercookie-bannergslbcookie-compliance
  Language:Go 1101

• utkusen / leviathan

  wide range mass audit toolkit

  pythonsql-injectionbrute-forceexploitationport-scanningservice-discovery
  Language:Python 969

• Ekultek / Zeus-Scanner

  Advanced reconnaissance utility

  google-dorksdork-scanningip-block-bypasscaptcha-bypassadmin-panel-finderxss-scannervulnerability-scannerspgp-keyserversql-injectionport-scannerrecon
  Language:Python 923
• magicRecon

  robotshell / magicRecon

  MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

  subdomainbugbugbounty-toolbugbountyvulnerability-scannersscannertoolinfosecbugbountytricksbash-scriptsubdomains-enumerationxss-vulnerabilitysql-injectionnuclei
  Language:Shell 716

• nim4 / DBShield

  Database firewall written in Go

  sql-injectiondatabasegolangmysqldb2postgresqlmariadboracle
  Language:Go 666

• YagamiiLight / Cerberus

  一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

  hacking-toolsql-injectionxsswafproxymiddlewaressrfpenetration-testingsecurity-toolswebsecuritypythonbypass
  Language:Python 637
• Cracker-Tool

  cracker911181 / Cracker-Tool

  All in One CRACKER911181's Tool. This Tool For Hacking and Pentesting. 🎭

  hackingpython-3pentestpythonshellfacebookwebtoolweb-toolsql-injectionsqlisqlinjectiontermuxtermux-hackingtermux-tooltemp-mailcrackercracker911181cracker-toolcracker911181-toolpentesting
  Language:Python 615

• ning1022 / SQLInjectionWiki

  一个专注于聚合和记录各种SQL注入方法的wiki

  mysqlmssqlsql-injectionwikisqlserveroracle
  Language:JavaScript 562

• chushuai / wscan

  Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.

  crawlerpassive-vulnerability-scannerpocsql-injectionvulnerability-scannerwebscanchromedpheadlesscel-gomartianwscanxsssubdomainstestwafwaf
  Language:Go 443

• Mr-Robert0 / Logsensor

  A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning

  bugbountyloginlogin-automationsql-injectionsql-injection-exploitationsqlisqlinjectionsql-injection-post
  Language:Python 443

• swisskyrepo / DamnWebScanner

  Another web vulnerabilities scanner, this extension works on Chrome and Opera

  sql-injectionpolyglot-vectorweb-vulnerabilities-scannerpluginextensionwebbrowserxss-vulnerabilityrcelfiscans
  Language:Python 436

• zt2 / sqli-hunter

  SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.

  sql-injectiondetectionexploitationrubypentestingvulnerability-scannersqlmap
  Language:Ruby 415

• RisingStack / protect

  Proactively protect your Node.js web services

  securityexpressxsssql-injectionnodejs
  Language:JavaScript 399

• brandonprry / gray_hat_csharp_code

  This repository contains full code examples from the book Gray Hat C#

  sql-injectionfuzzermetasploitpayloadc-sharpautomationdotnetmonoxamarinsecuritynessusopenvasnexposesqlmaparachniclamavcuckoo-sandboxpentestingblueteamredteam
  Language:C# 378

• rizemon / exploit-writing-for-oswe

  Tips on how to write exploit scripts (faster!)

  awaeawae-preposweoswe-preppythonpython3requestsweb-exploitationcross-site-scriptingsql-injectionsqlixss
  348

• JohnTroony / Blisqy

  Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).

  sqlsql-injectionblind-sql-injectionsql-payloadsexploitationdatabase-securityappsecblisqyjohn-ombagi
  Language:Python 330

• OWASP / Vulnerable-Web-Application

  OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber

  vulnerable-web-appwebphpsql-injectionxss-vulnerabilitycommand-executionfile-uploaddirectory-traversalxsssql
  Language:PHP 325

• americo / sqlifinder

  SQL Injection Vulnerability Scanner made with Python

  sqlsql-injectionsql-injection-attacksweb-hackingsecurityscannerhackingvulnerability
  Language:Python 284

• AlaBouali / bane

  The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..

  sql-injectionremote-code-executionremote-command-executioncsrf-scannercors-misconfiguration-scannerinformation-gathering-toolsbruteforce-attackshacking-toolshackingxss-scannerrce-scannerssrf-scannerpath-traversal-scannerddos-attackspenetration-testingpentesting-pythonbotnet-toolscms-vulns-finderbotnetsvulnerability-scanners
  Language:Python 264

• clouedoc / AutoSQLi

  An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.

  pythontorsqlmapwafsql-injectionwebsites-vulnerabledork-scanningautomatedinfoseccyberwarl33tosint
  Language:Python 263

• presidentbeef / inject-some-sql

  Have fun injecting SQL into a Ruby on Rails application!

  securityrubysql-injectionrailssqliruby-on-rails
  Language:Ruby 248