Open-source alternatives to Bbqsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

jSQL Injection is a lightweight application used to find database information from a server.

There are some features that we think SQLMap should have. Like finding admin panel of the target, better hash cracking etc. If you think the same, SQLMate is for you.

Damn Small SQLi Scanner

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing.

A web-based, easy-to-use, SQL injection scanner and exploiter tool.

Nosql-Exploitation-Framework

NoSQLAttack is an open source Python tool to automate expose MongoDB server IP on the internet and disclose the database data by MongoDB default configuration weaknesses and injection attacks. Presently, this project focuses on MongoDB.