sql-injection

Automatic SQL injection and database takeover tool

Source code for Hacker101.com - a free online web and mobile security class.

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.

Damn Vulnerable Web Application (DVWA)

w3af: web application attack and audit framework, the open source web vulnerability scanner.

Web Application Security Scanner Framework

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

🎯 SQL Injection Payload List

Automated NoSQL database enumeration and web application exploitation tool.

A cheat sheet that contains advanced queries for SQL Injection of all types.

DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic

Top disclosed reports from HackerOne

jSQL Injection is a Java application for automatic SQL database injection.

massive SQL injection vulnerability scanner

Janusec Application Gateway, an application security solution which provides ACME HTTPS, WAF (Web Application Firewall), CC defense, OAuth2 Authentication and load balancing. Janusec应用网关，提供ACME自动化证书与HTTPS接入、WAF (Web Application Firewall)、CC防御、OAuth2身份认证、负载均衡等功能。

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

wide range mass audit toolkit

Advanced reconnaissance utility

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .

Database firewall written in Go