#1Database assessment, SQL injection testing, auditing, encryption, and activity monitoring tools.
Kitploit recommended

POCs to demonstrate CVE-2026-42167 in ProFTPD

Detect security issues, large or small, in a CouchDB server

Exploit for CVE-2023-27524 targeting Apache Superset auth bypass and RCE. Forges session cookies, enumerates databases/users, executes OS commands,…

Apache CouchDB 3.2.1 - Remote Code Execution (RCE)

a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensitive data…

ISR-sqlget It's a blind SQL injection tool developed in Perl.

Deployable AWS-hosted Active Directory pentest lab with domain controller and vulnerable MSSQL; practice S4U2Self abuse, SQL brute force, and RCE.

Python-based tool to detect ransomware infections and malicious code in MySQL instances. Performs reconnaissance, user enumeration, and deep scans…

OpenFire 管理后台账号密码解密

An anonymizer tool for replacing PII and similar data in dev/test databases copied from production

poc for CVE-2025-14847

This script demonstrates a time-based blind SQL injection on Moodle platforms, exploiting response delays to extract data.

Django QuerySet.annotate(), aggregate(), extra() SQL 注入

Tool to crawl, visualize and interact with SQL server links in a d3 graph to help in your red/blue/purple/.../risk assessments pentest hacking team…

CVE-2019–9193 - PostgreSQL 9.3-12.3 Authenticated Remote Code Execution

0ldSQL_MySQL_RCE_exploit.py (ver. 1.0) (CVE-2016-6662) MySQL Remote Root Code Execution / Privesc PoC Exploit For testing purposes only. Do no…

Hunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak database

Detect security issues in an Apache CouchDB server