一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

Web-Security-Learning

The LAZY script will make your life easier, and of course faster.

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

hack tools

All in One CRACKER911181's Tool. This Tool For Hacking and Pentesting. 🎭

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.

A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning

基于Burp插件开发打造渗透测试自动化

JAVA 漏洞靶场 (Vulnerability Environment For Java)

WEB SERVICE SECURITY ASSESSMENT TOOL

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

AutoAudit—— the LLM for Cyber Security 网络安全大语言模型

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:

Using this script, you can enumerate Usernames and passwords of Nosql(mongodb) injecion vulnerable web applications.

SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.

Bypass WAF SQL Injection SQLMAP

Dork Search , Vulnerability Scanner ,SQL Injection , XSS , LFI ,RFI

Cheatsheet to exploit and learn SQL Injection.