Projects sharing features with Nosql Exploitation Framework

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

SQLiv

Blisqy is a tool to aid Web Security researchers to find Time-based Blind SQL injection on HTTP Headers and also exploitation of the same vulnerability.

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

Tool to help exploit XXE vulnerabilities

Enumdb is a brute force and post exploitation tool for MySQL and MSSQL databases. When provided a list of usernames and/or passwords, it will cycle through each targeted host looking for valid credentials. By default, enumdb will use newly discovered credentials to search for sensitive…

Simple script for running brute-force blind MySql injection

Local file inclusion exploitation tool

Redis(<=5.0.5) RCE

Exploit for CVE-2019-11043

#BBQSQL# A SQL Injection Exploitation Tool

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

BaRMIe is a tool for enumerating and attacking Java RMI (Remote Method Invocation) services.

Redis 4.x/5.x RCE

jSQL Injection is a lightweight application used to find database information from a server.

There are some features that we think SQLMap should have. Like finding admin panel of the target, better hash cracking etc. If you think the same, SQLMate is for you.