#1Database assessment, SQL injection testing, auditing, encryption, and activity monitoring tools.
Kitploit recommended
blacksky-algorithms/atprotoFork of the AT Protocol reference implementation with performance-optimized AppView, Rust-based firehose indexer, Redis caching, and community…
hikari-systems/slaterLow-memory graphdb with Bolt+tls support, at-rest encryption & vectors designed for local replica graph use cases.
soheilkhodayari/jawJAW: A Graph-based Security Analysis Framework for Client-side JavaScript
netspi/sqlc2SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.
nabroleonx/dbsliceExtract a slice of your production database to reproduce bugs locally. Point dbslice at a record, it follows foreign keys and gives you a complete,…
synacktiv/cve-2024-43468Exploit for CVE-2024-43468: unauthenticated SQL injection in Microsoft Configuration Manager Management Points, enabling arbitrary SQL execution and…
dev-sec/mysql-baselineDevSec MySQL Baseline - InSpec Profile
takito1812/firestorepwnfsp - Firestore Database Vulnerability Scanner Using APKs
initroot/wodatWindows Oracle Database Attack Toolkit
farenhytee/database-sentinelOpen-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys and risky…
mazx0p/mssqlbofA Beacon Object File suite for Microsoft SQL Server that speaks TDS 7.4 on the wire itself
fsecurelabs/n1qlmapThe tool exfiltrates data from Couchbase database by exploiting N1QL injection vulnerabilities.
sqlsure/sqlsureSemantic inspector for SQL — catches fan-out double-counting, additivity violations, wrong join keys, and policy breaches before the query runs.…
nccgroup/raccoonSalesforce object access auditor
karlvbiron/mad-catMAD-CAT (Meow Attack Data Corruption Automation Tool) is a comprehensive security tool designed to simulate data corruption attacks against multiple…
dev-sec/chef-mysql-hardeningThis chef cookbook provides security configuration for mysql.
seccoder-security-lab/jdbc-sqlxml-xxeh2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reproduction.
synacktiv/sccmsqlclientMSSQL client for SCCM environments, enabling reconnaissance, remote PowerShell execution on managed clients, and extraction of sensitive secrets such…
