Open-source alternatives to SQLiScanner

Automated NoSQL database enumeration and web application exploitation tool.

Gather urls from wayback machine then test each GET parameter for sql injection.

SQLiv

Messy BurpSuite plugin for SQL Truncation vulnerabilities.

Blisqy is a tool to aid Web Security researchers to find Time-based Blind SQL injection on HTTP Headers and also exploitation of the same vulnerability.

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

Enumdb is a brute force and post exploitation tool for MySQL and MSSQL databases. When provided a list of usernames and/or passwords, it will cycle through each targeted host looking for valid credentials. By default, enumdb will use newly discovered credentials to search for sensitive…

A python library to automate time-based blind SQL injection

Simple script for running brute-force blind MySql injection

#BBQSQL# A SQL Injection Exploitation Tool

Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, but also sample files for execution through mediums like msbuild and PowerShell.

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

jSQL Injection is a lightweight application used to find database information from a server.

There are some features that we think SQLMap should have. Like finding admin panel of the target, better hash cracking etc. If you think the same, SQLMate is for you.

Blind SQL Injection Tool with Golang

This project is an automated security testing suite designed to detect and exploit database vulnerabilities. It functions as a command-line utility that streamlines the identification, verification, and exploitation of web application flaws by automating the injection of malicious payloads into input parameters. The tool provides a comprehensive framework for database enumeration, allowing users to extract schema information, user data, and system configurations from identified injection points. What distinguishes this tool is its sophisticated engine for dynamic payload adaptation and heuris

Damn Small SQLi Scanner

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing.

A web-based, easy-to-use, SQL injection scanner and exploiter tool.

massive SQL injection vulnerability scanner

Nosql-Exploitation-Framework

NoSQLAttack is an open source Python tool to automate expose MongoDB server IP on the internet and disclose the database data by MongoDB default configuration weaknesses and injection attacks. Presently, this project focuses on MongoDB.

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.