Tools

p0dalirius/mssql-analysis-coerce

A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.

jas502n/mssql-command-tool

mssql 终端连接工具|命令执行

blue0x1/sqlwinds

SQLWinds - SQL Server Security Assessment & Post-Exploitation Toolkit

l0lsec/cve-2021-26837

CVE-2021-26837 - SQL Injection in the SearchTextbox parameter of HelpSystems/Fortra DeliverNow. Payloads, annotated requests, and evidence. Fixed in…

l0lsec/cve-2021-3262

CVE-2021-3262 - Blind SQL Injection in the editOEN parameter of TripSpark VEO Transportation / NovusEDU. Unauthenticated, internet-facing. Payloads,…

lgandx/pcredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP,…

rgkue/mysqli

Time-Based Blind SQL Injection tool for MySQL - CVE-2019-9053

trungtin1998/cve-2020-15394-poc

PoC CVE

netspi/ad-pathfinder

Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

kviklet/kviklet

Pull Request-like Review/Approval flow for database queries. For compliant but smooth Engineering access to production.

nilsteampassnet/teampass

Collaborative Passwords Manager

lgandx/responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…

blackarrowsec/mssqlproxy

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

keramas/mssqli-duet

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

m8sec/enumdb

Relational database brute force and post exploitation tool for MySQL and MSSQL