Tools

brunoh6/web-threat-mitigation

Hands-on lab on detecting and mitigating web app threats using OWASP ZAP, Burp Suite, and ModSecurity WAF (with OWASP CRS). Case study: Spring4Shell…

shoucheng3/apache__jspwiki_cve-2019-10076_2-11-0-m3

Java-based wiki platform with JAAS security integration, access control, and detailed configuration auditing. Includes documentation for…

konstantin-kelemen/mysqld_safe-cve-2016-6662-patch

Ansible playbook that applies the Percona patch for CVE-2016-6662 to the mysqld_safe file on CentOS and FreeBSD systems.

slowql/slowql

Next-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality.…

blue0x1/sqlwinds

SQLWinds - SQL Server Security Assessment & Post-Exploitation Toolkit

netspi/powerupsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

nilsteampassnet/teampass

Collaborative Passwords Manager

pgaudit/pgaudit

PostgreSQL Audit Extension

foospidy/dbdat

Db Database Assessment Tool

boreas37/cve-2026-64638-poc-xss2shell-

XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template

dev-sec/mysql-baseline

DevSec MySQL Baseline - InSpec Profile

n3rada/mssqland

In-target C# post-exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading login…

nccgroup/raccoon

Salesforce object access auditor

dev-sec/chef-mysql-hardening

This chef cookbook provides security configuration for mysql.

iriscouch/audit_couchdb

Detect security issues, large or small, in a CouchDB server

jhs/audit_couchdb

Detect security issues in an Apache CouchDB server

synacktiv/bissap

A new open-source tool to quickly audit SAP permissions.

ozergoker/cve-2021-40444

Microsoft MSHTML Remote Code Execution Vulnerability CVE-2021-40444