Tools

eljoamy/mongobleed-exploit

MongoBleed (CVE-2025-14847) Lab & PoC : A complete educational environment to reproduce the critical unauthenticated memory leak in MongoDB. Includes…

xforcered/sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

fsecurelabs/n1qlmap

The tool exfiltrates data from Couchbase database by exploiting N1QL injection vulnerabilities.

sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

sjzar/chatlog

chat log tool, easily use your own chat data. 聊天记录工具，轻松使用自己的聊天数据

r0oth3x49/ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

tarunkant/gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

codingo/nosqlmap

Automated NoSQL database enumeration and web application exploitation tool.

b374k/b374k

PHP Webshell with handy features

cve-search/cve-search

Local CVE/CPE vulnerability database with search, ranking, web interface, and API for offline vulnerability analysis and management.

40t/go-sniffer

🔎Sniffing and parsing mysql,redis,http,mongodb etc protocol. 抓包截取项目中的数据库请求并解析成相应的语句。

ron190/jsql-injection

Automated SQL injection detection and exploitation tool for extracting database information from web applications, supporting multiple injection…

quentinhardy/odat

Penetration testing tool for Oracle Databases that discovers valid SIDs, brute-forces credentials, escalates privileges to DBA, executes system…

sqlancer/sqlancer

Automated testing to find logic and performance bugs in database systems

woj-ciech/leaklooker

Find open databases - Powered by Binaryedge.io

sw33tlie/bbscope

Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

stampery/mongoaudit

🔥 A powerful MongoDB auditing and pentesting tool 🔥