#1
aeyesec/cve-2022-34265PoC for CVE-2022-34265 (Django)
m8sec/enumdbRelational database brute force and post exploitation tool for MySQL and MSSQL
oldboy21/ldap-password-hunterAutomated tool that hunts for world-readable passwords in Active Directory LDAP databases by leveraging Kerberos authentication and ldapsearch to…
sysdream/pysqliPython SQL injection framework
tw1sm/pysqlreconOffensive MSSQL toolkit written in Python, based off SQLRecon
slowql/slowqlNext-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality.…
securebinary/firebaseexploiterCLI tool to scan for and exploit insecure Firebase databases, supporting mass vulnerability scanning, custom JSON payload injection, and URI path…
saferman/cve-2020-7471django 漏洞：CVE-2020-7471 Potential SQL injection via StringAgg(delimiter) 的漏洞环境和 POC
iosiro/baserunnerA tool for exploring Firebase datastores.
guilherme-grimm/graph-gosimply nodes and graphs
sadicann/andorBlind SQL Injection Tool with Golang
jimywork/stretcherTool designed to help identify open Elasticsearch servers that are exposing sensitive information
n3rada/mssqlandIn-target C# post-exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading login…
jas502n/redis-rceremote code execute for redis4 and redis5
adamwhitehat/judge-jury-and-executableA file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV.…
dinosn/mariadb-13-rce-labMariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and…
yashpl/mongobusterHunt Open MongoDB instances
