Awesome GitHub RepositoriesSQL Injection Tools

This project is an automated security testing suite designed to detect and exploit database vulnerabilities. It functions as a command-line utility that streamlines the identification, verification, and exploitation of web application flaws by automating the injection of malicious payloads into input parameters. The tool provides a comprehensive framework for database enumeration, allowing users to extract schema information, user data, and system configurations from identified injection points. What distinguishes this tool is its sophisticated engine for dynamic payload adaptation and heuris

DVWA is a vulnerable web application sandbox and PHP security training environment. It serves as a deployable penetration testing target and an OWASP Top 10 lab designed for practicing exploits and simulating common web security vulnerabilities. The application allows users to adjust security difficulty levels to match their skill level and toggle between different SQL database engines to test how various systems handle injection attacks. It includes a mechanism to disable authentication, enabling automated security tools to interact directly with the environment. The project provides capabi

K8tools is a multi-stage attack framework that combines memory-only payload execution, credential testing, port forwarding, privilege escalation, and physical USB-based keystroke injection for comprehensive system compromise. At its core, the Ladon PowerShell module loads a multi-function scanner directly into memory, enabling command execution without writing files to disk, while supporting memory-only payload delivery that downloads and runs obfuscated shellcode or PowerShell commands to evade antivirus detection. The framework distinguishes itself through its breadth of integrated capabili

AllHackingTools is a security tool orchestrator and suite designed to install, update, and manage a wide array of third-party hacking and security utilities from a single command interface. It functions as a centralized hub for network analysis, open source intelligence, penetration testing, and social engineering tools. The project provides specialized frameworks for gathering open source intelligence and searching for user profiles across social platforms. It includes toolkits for network reconnaissance, vulnerability scanning, and the execution of security exploits, as well as a social eng

Ghauri est un scanner d'injection SQL automatisé et un outil d'exploitation conçu pour détecter et extraire des données de bases de données vulnérables. Il fonctionne comme un framework d'exfiltration de base de données qui identifie les failles de sécurité et récupère les bannières système, les noms d'hôtes et les schémas de base de données. L'outil identifie les vulnérabilités booléennes, basées sur les erreurs, basées sur le temps et les requêtes empilées (stacked queries) sur plusieurs vecteurs d'entrée, notamment les en-têtes HTTP, les cookies, JSON, SOAP et XML. Il offre des capacités d'exfiltration automatisée de bases de données et le traitement de listes de cibles en masse pour identifier les failles sur plusieurs environnements. Le système inclut l'obfuscation du trafic réseau via le routage par proxy et la randomisation de l'agent utilisateur pour contourner les restrictions de sécurité. Il gère également la persistance de l'état de session pour permettre la reprise des processus d'extraction de données interrompus et fournit des contrôles pour limiter le volume d'enregistrements récupérés.

Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network vulnerability scanning, open-source intelligence, penetration testing, and social engineering. It functions as a multi-purpose framework for automating reconnaissance and executing security audits across diverse network environments. The project features a specialized phishing and social engineering toolkit used for cloning websites, masking URLs, and deploying deceptive pages to capture user credentials. It also includes a remote access Trojan builder for generating platform-specific exe