#1Database assessment, SQL injection testing, auditing, encryption, and activity monitoring tools.
Kitploit recommended
b374k/b374kPHP Webshell with handy features
ron190/jsql-injectionAutomated SQL injection detection and exploitation tool for extracting database information from web applications, supporting multiple injection…
aboutcode-org/vulnerablecodeOpen-source vulnerability database aggregating CVE data from multiple sources with a web UI and API. Maps vulnerabilities to specific software…
betterdb-inc/monitorReal-time monitoring and slowlog analysis for Valkey and Redis databases with anomaly detection, ACL auditing, and Prometheus metrics export.
quentinhardy/odatPenetration testing tool for Oracle Databases that discovers valid SIDs, brute-forces credentials, escalates privileges to DBA, executes system…
cossacklabs/themisEasy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14…
quentinhardy/msdatMSDAT: Microsoft SQL Database Attacking Tool
joe-desimone/mongobleedProof-of-concept exploit for CVE-2025-14847, a MongoDB zlib decompression vulnerability that leaks uninitialized server memory via crafted BSON…
scorpioneslabs/mssqlpwnerAdvanced MSSQL penetration testing tool for lateral movement, command execution, NTLM relay, and brute-force attacks via linked servers and multiple…
paradigmxyz/iron-proxyAn egress firewall for untrusted workloads.
stampery/mongoaudit🔥 A powerful MongoDB auditing and pentesting tool 🔥
xtraceai/xtrace-sdkopen source version xtrace sdk
0xdea/exploitsPublic exploit repository covering local privilege escalation, buffer overflows, and database exploits across Linux, Solaris, AIX, OpenBSD, Zyxel,…
torque59/nosql-exploitation-frameworkA Python Framework For NoSQL Scanning and Exploitation
kviklet/kvikletPull Request-like Review/Approval flow for database queries. For compliant but smooth Engineering access to production.
berabuddies/redis-pocRCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0, 8.8.1
skahwah/sqlreconA C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.
