Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Database Security

Database assessment, SQL injection testing, auditing, encryption, and activity monitoring tools.

Kitploit recommended

Top tools

10 selected
sqlmap preview#1

sqlmap

GitHubsqlmapproject/sqlmap
38.2k13h 20m ago
openvas-scanner preview#2

openvas-scanner

GitHubgreenbone/openvas-scanner
4.8k10h 50m ago
nuclei preview#3

nuclei

GitHubprojectdiscovery/nuclei
30.4k11h 20m ago
metasploit-framework preview#4

metasploit-framework

GitHubrapid7/metasploit-framework
38.8k3 days ago
nmap preview#5

nmap

GitHubnmap/nmap
13.3k2h 39m ago
zaproxy preview#6

zaproxy

GitHubzaproxy/zaproxy
15.6k14h 16m ago
wapiti preview#7

wapiti

GitHubwapiti-scanner/wapiti
1.9k1 month ago
semgrep preview#8

semgrep

GitHubsemgrep/semgrep
16.2k5 days ago
trivy preview#9

trivy

GitHubaquasecurity/trivy
37.4k15h 25m ago
wazuh preview#10

wazuh

GitHubwazuh/wazuh
16.5k1 day ago
NewestRelevanceMost popularRecently updated
650 results
milvus-auth-audit preview

milvus-auth-audit

GitHubqianlijaingshan/milvus-auth-audit

Milvus 认证安全检测脚本：CVE-2025-64513 (sourceid后门) / CVE-2026-26190 (/expr弱token) / 内部端口53100

authentication-authorizationvulnerability-scannersexploitation+4
2 months ago
DjVul_StringAgg preview

DjVul_StringAgg

GitHubsecoba/djvul_stringagg

Django StringAgg SQL Injection (CVE-2020-7471)

vulnerability-analysiscode-analysisweb-application-exploitation+2
26 years ago
CVE-2020-7471 preview

CVE-2020-7471

GitHubsncker/cve-2020-7471

CVE-2020-7471 Potential SQL injection via StringAgg(delimiter)

vulnerability-analysisexploitationweb-application-exploitation+3
26 years ago
patch-CVE-2026-03200 preview

patch-CVE-2026-03200

GitHubgduma-phdata/patch-cve-2026-03200

Deployed patch for CVE-2026-03200, a critical SQL injection vulnerability in Progress MOVEit, with validation and deployment details.

vulnerability-analysisdatabase-security
2 months ago
CVE-2023-25157 preview

CVE-2023-25157

GitHubivanesk315/cve-2023-25157

Local GeoServer/PostGIS lab reproducing OGC Filter SQL injection (CVE-2023-25157/25158) with vulnerable, patched, and mitigated A/B test modes.

vulnerability-scannersvulnerability-analysisexploitation+6
1 month ago
DB_Audit_Research preview

DB_Audit_Research

GitHubmthamil107/db_audit_research

Self-Defeating Audits: reproducible lab showing a low-privilege PostgreSQL role reversibly blinding a trigger-based auditor + poisoning attribution…

defensive-toolsexploitationpapers-research+4
2 months ago
Azure preview

Azure

GitHuboffsecpierogi/azure

Bash and PowerShell scripts for Azure security assessments, covering IAM privilege escalation, container registry exploitation, Key Vault exposure,…

cloud-infrastructure-securityprivilege-escalationcontainer-security+8
13 months ago
nosqli-flintcms preview

nosqli-flintcms

GitHubnisaruj/nosqli-flintcms

Blind noSQL injection case study lab based on CVE-2018-3783

vulnerability-analysisweb-application-exploitationctf+3
43 years ago
CVE-2024-8309 preview

CVE-2024-8309

GitHubliadlevy/cve-2024-8309

Proof-of-concept demonstrating prompt injection in Langchain's GraphCypherQAChain leading to SQL injection in Neo4j databases. Includes Docker-based…

vulnerability-analysisexploitationweb-application-exploitation+3
32 years ago
CVE-2025-46817 preview

CVE-2025-46817

GitHubdwisiswant0/cve-2025-46817

Proof-of-concept for Redis Lua unpack integer overflow (CVE-2025-46817) demonstrating stack blow-up and potential RCE on Redis 8.2.1.

vulnerability-analysisexploitationweb-security+2
41 year ago
CVE-2021-24741 preview

CVE-2021-24741

GitHubdldygnl/cve-2021-24741

Proof-of-concept exploit demonstrating multiple unauthenticated SQL injection vulnerabilities in Support Board 3.3.3, with error-based and time-based…

vulnerability-analysisexploitationweb-application-exploitation+3
23 years ago
CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated preview

CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated

GitHubh4md153v63n/cve-2022-40347_intern-record-system-phone-v1.0-sql-injection-vulnerability-unauthenticated

CVE-2022-40347: Intern Record System - 'phone', 'email', 'deptType' and 'name' SQL Injection (Unauthenticated)

vulnerability-analysisexploitationweb-application-exploitation+3
32 years ago
CVE-2026-11115-Database-Connection-String-Injection-via-Env-Variable preview

CVE-2026-11115-Database-Connection-String-Injection-via-Env-Variable

GitHubgeorge0papasotiriou/cve-2026-11115-database-connection-string-injection-via-env-variable
vulnerability-analysisexploitationpenetration-testing+3
3 months ago
CVE-2022-21661-Demo preview

CVE-2022-21661-Demo

GitHubdaniel616/cve-2022-21661-demo

Demonstration of the SQL injection vulnerability in wordpress 5.8.2

vulnerability-analysisweb-application-exploitationweb-security+3
23 years ago
CVE-2023-31702 preview

CVE-2023-31702

GitHubsahiloj/cve-2023-31702

CVE-2023-31702 is an authenticated SQL Injection vulnerability discovered in MicroWorld Technologies eScan Management Console version 14.0.1400.2281.

vulnerability-analysisexploitationweb-application-exploitation+3
28 months ago
supahunter preview

supahunter

GitHubproxydom/supahunter

Automated reconnaissance and exploitation framework for misconfigured Supabase instances. Features schema enumeration, Selenium-based key extraction,…

privilege-escalationreconnaissancevulnerability-analysis+8
29 months ago
PoC-CVE-2025-66224 preview

PoC-CVE-2025-66224

GitHubrichard-natan/poc-cve-2025-66224

Proof-of-concept exploit for CVE-2025-66224 demonstrating remote code execution in OrangeHRM via command injection in the sendmail_path parameter,…

vulnerability-analysisexploitationweb-application-exploitation+4
210 months ago
CVE-2024-42327_Zabbix_SQLI preview

CVE-2024-42327_Zabbix_SQLI

GitHubwatchdog1337/cve-2024-42327_zabbix_sqli

POC for CVE-2024-42327, an authenticated SQL Injection in Zabbix through the user.get API Method

vulnerability-analysisexploitationweb-application-exploitation+3
31 year ago
Previous1…171819…37Next