sqlmapproject / sqlmap

Star

Automatic SQL injection and database takeover tool

python database detection sql-injection pentesting exploitation takeover vulnerability-scanner

Updated Jul 1, 2020
Python

Hacker0x01 / hacker101

Star

Source code for Hacker101.com - a free online web and mobile security class.

education security hacking xss sql-injection csrf web-security clickjacking hackerone session-fixation hacker101 unchecked-redirects

Updated Jun 15, 2020
CSS

blaCCkHatHacEEkr / PENTESTING-BIBLE

Star

Updates to this repository will continue to arrive until the number of links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.

Updated Jul 2, 2020

ethicalhack3r / DVWA

Star

Damn Vulnerable Web Application (DVWA)

training php security hacking sql-injection infosec dvwa

Updated Jun 23, 2020
PHP

andresriancho / w3af

Star

Open

nodejs not linked to /usr/bin/node

2

Hostuniverse commented Jul 21, 2019

Hi there,

Thanks for the awesome tool!

During the installation I encountered a problem with node as it kept on asking me to install retire via npm:

/usr/bin/env: 'node': No such file or directory
External programs used by w3af are not installed or were not found. Run these commands to install them on your system:

npm install -g retire@2.0.3
npm update -g retire

A script wit

[Auto-Generated] Bug Report - BaseFrameworkException: Error in user configuration: "" is not a directory.

Open

Improve dependency check

1

Find more good first issues →

Arachni / arachni

Star

Web Application Security Scanner Framework

javascript ruby crawler security-audit modular hack dom analysis scanner detection hacking xss audit web-application penetration-testing sql-injection vulnerability-detection arachni scanners

Updated Jan 28, 2020
Ruby

1N3 / IntruderPayloads

Star

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

attack injection fuzzing sql-injection bugbounty payloads fuzz burpsuite intruder fuzz-lists burpsuite-engagement burpsuite-intruder

Updated Jun 10, 2020
BitBake

codingo / NoSQLMap

Star

Automated NoSQL database enumeration and web application exploitation tool.

couchdb redis security-audit mongodb nosql scanner hacking databases enumeration penetration-testing nosql-databases sql-injection bugbounty mongodb-database offensive-security hacktoberfest hacking-tool security-tools web-application-security security-toolset

Updated Jun 23, 2020
Python

utkusen / leviathan

Star

wide range mass audit toolkit

python service-discovery brute-force sql-injection exploitation port-scanning

Updated Oct 3, 2018
Python

the-robot / sqliv

Star

massive SQL injection vulnerability scanner

crawler scanner multiprocessing sqli sql-injection sqli-vulnerability-scanner scanning reverse-ip-scan

Updated Aug 14, 2018
Python

ron190 / jsql-injection

Star

jSQL Injection is a Java application for automatic SQL database injection.

java docker spring-boot travis-ci hibernate sql-injection pentest ctf-tools sonarcloud

Updated May 24, 2020
Java

Janusec / janusec

Star

Janusec Application Gateway, Provides Simple, Fast and Secure Application Delivery. JANUSEC应用网关，提供简单、快速、安全的应用交付。

go golang security gateway waf xss reverse-proxy sql-injection application-security web-application-firewall web-console web-application-security web-ssh application-gateway load-balance cc-attack-defense sensitive-data-leakage janusec-application-gateway

Updated Jul 3, 2020
Go

Ekultek / Zeus-Scanner

Star

Advanced reconnaissance utility

sql-injection port-scanner recon xss-scanner vulnerability-scanners google-dorks pgp-keyserver admin-panel-finder dork-scanning ip-block-bypass captcha-bypass

Updated May 10, 2019
Python

nim4 / DBShield

Star

Database firewall written in Go

mysql golang database postgresql oracle mariadb sql-injection db2

Updated Sep 24, 2017
Go

s0md3v / Blazy

Star

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .

scanner waf bruteforce detector cloudflare brute-force sql-injection csrf clickjacking

Updated May 5, 2019
Python

RisingStack / protect

Star

Proactively protect your Node.js web services

nodejs security express xss sql-injection

Updated Sep 28, 2018
JavaScript

ning1022 / SQLInjectionWiki

Star

一个专注于聚合和记录各种SQL注入方法的wiki

mysql wiki oracle sql-injection mssql sqlserver

Updated Mar 23, 2019
JavaScript

zt2 / sqli-hunter

Star

SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.

ruby detection sql-injection pentesting exploitation sqlmap vulnerability-scanner

Updated Jun 3, 2020
Ruby

brandonprry / gray_hat_csharp_code

Star

This repository contains full code examples from the book Gray Hat C#

Updated Jul 21, 2017
C#

payloadbox / sql-injection-payload-list

Star

🎯 SQL Injection Payload List

injection hacking attacker sql-injection bugbounty payload payloads websecurity owasp-top-10 security-research injection-attacks sql-injection-attacks sql-injection-exploitation sql-injection-proof sql-inject sql-injections sql-injection-filterer sql-injection-attack sql-injection-payloads injection-payloads

Updated Jan 8, 2020

YagamiiLight / Cerberus

Star

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

python middleware proxy waf xss penetration-testing sql-injection bypass hacking-tool ssrf security-tools websecurity

Updated Jan 5, 2020
Python

swisskyrepo / GraphQLmap

Star

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

graphql sql-injection ctf capture-the-flag pentest fuzz nosql-injection graphql-injection

Updated May 22, 2020
Python

swisskyrepo / DamnWebScanner

Star

Another web vulnerabilities scanner, this extension works on Chrome and Opera

plugin extension rce sql-injection xss-vulnerability scans webbrowser lfi polyglot-vector web-vulnerabilities-scanner

Updated Sep 22, 2019
Python

sheldoncoupeheure / AutoSQLi

Star

An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.

python osint tor waf sql-injection infosec l33t automated sqlmap cyberwar dork-scanning websites-vulnerable

Updated May 26, 2018
Python

presidentbeef / inject-some-sql

Star

Have fun injecting SQL into a Ruby on Rails application!

ruby rails security sqli sql-injection ruby-on-rails

Updated Jun 25, 2020
Ruby

reddelexc / hackerone-reports

Star

Top disclosed reports from HackerOne

xss rce reports sql-injection csrf writeups bugbounty ssrf hackerone xxe idor

Updated Jun 22, 2020
Python

laurent22 / so-sql-injections

Star

SQL injection vulnerabilities in Stack Overflow PHP questions

mysql php sql-injection

Updated Mar 25, 2017
PHP

incredibleindishell / sqlite-lab

Star

This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is for fun. Just enjoy it \m/

security-audit sql-injection pentesting sqlite-lab vulnerable-application sqlite-injection

Updated Jan 7, 2018
PHP

skiptomyliu / solutions-bwapp

Star

In progress rough solutions to bWAPP / bee-box

xss html-injection sql-injection csrf appsec directory-traversal bwapp xpath-injection

Updated Jan 7, 2020
HTML

JohnTroony / Blisqy

Star

Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).

sql sql-injection exploitation appsec blind-sql-injection sql-payloads database-security blisqy john-ombagi

Updated Mar 24, 2019
Python

sql-injection

Here are 212 public repositories matching this topic...

sqlmapproject / sqlmap

Hacker0x01 / hacker101

blaCCkHatHacEEkr / PENTESTING-BIBLE

ethicalhack3r / DVWA

andresriancho / w3af

nodejs not linked to /usr/bin/node

[Auto-Generated] Bug Report - BaseFrameworkException: Error in user configuration: "" is not a directory.

Improve dependency check

Arachni / arachni

1N3 / IntruderPayloads

codingo / NoSQLMap

utkusen / leviathan

the-robot / sqliv

ron190 / jsql-injection

Janusec / janusec

Ekultek / Zeus-Scanner

nim4 / DBShield

s0md3v / Blazy

RisingStack / protect

ning1022 / SQLInjectionWiki

zt2 / sqli-hunter

brandonprry / gray_hat_csharp_code

payloadbox / sql-injection-payload-list

YagamiiLight / Cerberus

swisskyrepo / GraphQLmap

swisskyrepo / DamnWebScanner

sheldoncoupeheure / AutoSQLi

presidentbeef / inject-some-sql

reddelexc / hackerone-reports

laurent22 / so-sql-injections

incredibleindishell / sqlite-lab

skiptomyliu / solutions-bwapp

JohnTroony / Blisqy

Improve this page

Add this topic to your repo