Search Results for "automatic sql injection"

django-pgtrigger is a Django library for defining and managing PostgreSQL triggers directly in Python code. It allows developers to create database-level logic like automatic field updates, auditing, or validation without writing raw SQL. It’s ideal for teams that want stronger data integrity while keeping logic version-controlled.

ExcelToDatabase is an automated tool for batch-importing Excel data into a database. It supports 10 popular databases including MySQL, Oracle, SQL Server, PostgreSQL, and so on. Supported file formats include xls, xlsx, xlsm, xlsb, csv, txt, xml, json, and dbf. Its native user interface brings users a comfortable experience for simplified Excel import and export, making it easier than ever before. Whether you want one-click, batch, or personalized import/export, or use scheduled tasks for...

GraphQLmap is a Python-based scripting engine designed to interact with GraphQL endpoints for penetration testing purposes. It can connect to a target GraphQL endpoint, dump the schema (if introspection is enabled), query it interactively, and fuzz fields for NoSQL/SQL injection vectors, thereby revealing hidden attack surfaces. GraphQL endpoints represent a relatively newer attack vector compared to REST, and GraphQLmap helps bridge this gap by providing tooling tailored to the GraphQL paradigm. Because many modern applications adopt GraphQL for flexibility, this tool is useful when scanning and attacking API back ends where typical REST-based tools fall short. ...

...Applications interact with stored data using familiar dictionary operations such as indexing, keys, values, items, and length. Values can contain any picklable Python object instead of being restricted to basic SQL types. Multiple independent dictionary tables can live inside the same SQLite database file. The library supports access to one connection from multiple threads while internally serializing database operations. Developers can enable automatic commits or explicitly control transactions for better performance. Custom serializers allow alternatives such as JSON or compressed binary values, and context-manager support automatically closes database connections.

Mole is an automatic SQL Injection exploitation tool. Only by providing a vulnerable URL and a valid string on the site it can detect the injection and exploit it, either by using the union technique or a boolean query based technique. The Mole uses a command based interface, allowing the user to indicate the action he wants to perform easily. The CLI also provides auto-completion on both commands and command arguments, making the user type as less as possible.

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers.

Intends to make an automatic interface generator for a given sql structure, with insert and update dialogs an delete functionability

Libdejector is a database tool which defeats SQL injection attacks by performing context-free validation of queries. While written in C, SWIG wrappers exist for Python and other languages will be following soon.