Open-source alternatives to BurpSQLTruncSanner

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

Automated NoSQL database enumeration and web application exploitation tool.

Gather urls from wayback machine then test each GET parameter for sql injection.

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

A python library to automate time-based blind SQL injection

Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, but also sample files for execution through mediums like msbuild and PowerShell.

Blind SQL Injection Tool with Golang

This project is an automated security testing suite designed to detect and exploit database vulnerabilities. It functions as a command-line utility that streamlines the identification, verification, and exploitation of web application flaws by automating the injection of malicious payloads into input parameters. The tool provides a comprehensive framework for database enumeration, allowing users to extract schema information, user data, and system configurations from identified injection points. What distinguishes this tool is its sophisticated engine for dynamic payload adaptation and heuris

massive SQL injection vulnerability scanner

Automatic SQL injection with Charles and sqlmap api

SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse