Open-source alternatives to Mssqlproxy

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

Automated NoSQL database enumeration and web application exploitation tool.

Pingtunnel is a network utility that implements ICMP tunneling by encapsulating TCP and UDP traffic within ICMP echo packets. It functions as an encrypted network tunnel and a SOCKS5 proxy server, allowing network traffic to be routed through a secure channel to bypass restrictive firewalls and network filters. The tool secures transmitted data using symmetric encryption to prevent interception of the tunneled payload. It uses a SOCKS5 proxy interface to accept standard network requests and redirect them into the ICMP tunnel. The system includes adaptive network polling to balance latency an

Gather urls from wayback machine then test each GET parameter for sql injection.

Messy BurpSuite plugin for SQL Truncation vulnerabilities.

Chisel is a network tunneling tool that facilitates secure communication by encapsulating TCP and UDP traffic within HTTP requests. It functions as a connection multiplexer, consolidating multiple logical network streams into a single persistent connection to improve throughput and reduce overhead. By leveraging standard web protocols, the system enables firewall traversal and provides a mechanism for remote port forwarding and proxying. The project distinguishes itself through its focus on resilient connectivity and granular access control. It maintains persistent network sessions across uns

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

A python library to automate time-based blind SQL injection

Redis(<=5.0.5) RCE

(TCP tunneling over HTTP for web application servers)

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, but also sample files for execution through mediums like msbuild and PowerShell.

Creates a local or "reverse" Socks proxy using powershell.

ODAT: Oracle Database Attacking Tool

Network Pivoting Toolkit

Redis 4.x/5.x RCE

Blind SQL Injection Tool with Golang

MDUT - Multiple Database Utilization Tools

Secure Socket Funneling - Network tool and toolkit - TCP and UDP port forwarding, SOCKS proxy, remote shell, standalone and cross platform