#1Database assessment, SQL injection testing, auditing, encryption, and activity monitoring tools.
Kitploit recommended
citcheese/odbparserOSINT tool to search, parse and dump only the open Elasticsearch and MongoDB directories that have the data you care about exposing
al1ex/cve-2021-27928CVE-2021-27928 MariaDB/MySQL-'wsrep provider' 命令注入漏洞
dwisiswant0/cve-2025-49844Proof-of-concept exploit for Redis 8.2.1 Lua parser use-after-free, racing garbage collection via crafted loadstring calls to achieve remote code…
mhaskar/blinderA python library to automate time-based blind SQL injection
tjnull/cygorAn modular asset discovery framework written in python to automate the repeating manual work
neo23x0/mongobleed-detectorDetection Script for MongoBleed Exploitation
lorenzotullini/influxdb-exploit-cve-2019-20933InfluxDB CVE-2019-20933 vulnerability exploit
jas502n/sqlmap_burpsuiteSqlMap_BurpSuite
daniel2005d/mapxploreAllow exporting the information downloaded with sqlmap to a relational Database like Postgres and sqlite
rootsecdev/microburstsecretshunterScans exported Azure domain dumps for plaintext passwords, connection strings, storage keys, and other secrets; generates redacted CSV/HTML reports…
trganda/cve-2022-22980Proof-of-concept exploit for CVE-2022-22980 targeting Spring Data MongoDB. Demonstrates remote code execution via crafted MongoDB queries. Requires…
codelatteid/carinaWebshell, Virtual Private Server (VPS) and cPanel Database
jas502n/mssql-command-toolmssql 终端连接工具|命令执行
var77/cve-2026-2005PoC for CVE-2026-2005
yoyosh/darkreplicaCVE-2026-23631 (DarkReplica) Redis Exploit
shieldersec/cve-2020-11579Exploit code for CVE-2020-11579, an arbitrary file disclosure through the MySQL client in PHPKB
adityaks/straferStrafer: A tool to detect potential infections in Elasticsearch instances
trailofbits/cvedbCVE querying library and utility that uses a local store syncing directly to the National Vulnerability Database
