sqli-injection

Check your WAF before an attacker does

aawaf 是一款基于语义分析的Web应用防火墙

Automatic SQL injection and database takeover tool.

Ultra-low latency RASP for .NET 10. High-performance security engine for high-throughput apps (FinTech/Gaming) with zero-allocation architecture.

Simple SQLi Union Vulnerablity Scanner

SQLi-Detect is a lightweight and effective SQL Injection Detection tool designed to identify and log potential SQL injection attempts in user inputs. It leverages regex pattern matching to detect common SQL injection payloads and provides multiple interfaces including a CLI tool and a REST API.

HelloSpecter is a professional cybersecurity partners reconnaissance & vulnerability assessment tool for HelloTalk. It combines OSINT capabilities, security testing (authentication flaws, API exploitation, injection vulnerabilities), IP and multi-platform username hunting with automatic sanitization. Designed for security researchers only

AI-powered SQL injection detection & prevention tool using BERT and Stable Diffusion. Features real-time analysis, 3D attack visualization, query sanitization, and voice-to-SQL security.

Fast Multi-Processing Auto SQL Vulnerability Scanner using SQLMap

A powerful multi-threaded scanner for detecting SQL and NoSQL injection vulnerabilities with advanced WAF bypass techniques and comprehensive reporting.

Immerse yourself in a practical hacking exercise to gain valuable experience with prevalent security exploits. Explore six key vulnerabilities, including SQL injection, session hijacking, username enumeration, IDOR, XSS, and CSRF, for a comprehensive cybersecurity learning experience.

A web security project that uses Python, Django, and machine learning to detect common web vulnerabilities. It combines Regex-based rules with a CNN model to analyze payloads and provide vulnerability type, confidence, severity, and CVSS scores.

This repository showcases a web application designed to be vulnerable to SQL Injection attacks.

Interactive demo that shows how SQL injection works and why parameterized queries stop it, against real Postgres and BigQuery databases.

An automated DAST (Dynamic Application Security Testing) framework for web application auditing. Features multi-threaded passive header analysis, active multi-vector parameter fuzzing for SQLi/XSS detection, and an integrated security knowledge base for executive reporting.