Search Results for "sql injection tool"
Sort By:
Showing 32 open source projects for "sql injection tool"
View related business solutions-
$300 Free Credits for Your Google Cloud ProjectsLaunch your next project with $300 in free Google Cloud credits—no strings attached. Test, build, and deploy without risk. Use your credits across the entire Google Cloud platform to find what works best for your needs. After your credits are used, continue with always-free tier services. Only pay when you're ready to scale. Sign up in minutes and start exploring.
-
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
1
sqlmap
Automatic SQL injection and database takeover tool
sqlmap is a powerful, feature-filled, open source penetration testing tool. It makes detecting and exploiting SQL injection flaws and taking over the database servers an automated process. sqlmap comes with a great range of features that along with its powerful detection engine make it the ultimate penetration tester. It offers full support for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, and many other database management systems. ... -
2
Maltrail
Malicious traffic detection system
Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user-defined lists, where trail can be anything from domain name, URL, IP address (e.g. 185.130.5.231 for the known attacker) or HTTP User-Agent header value (e.g. sqlmap for automatic SQL injection and database takeover tool). Also, it uses (optional) advanced heuristic mechanisms that can help in the discovery of unknown threats (e.g. new malware). Sensor(s) is a standalone component running on the monitoring node (e.g. Linux platform connected passively to the SPAN/mirroring port or transparently inline on a Linux bridge) or at the standalone machine (e.g. ... -
3
Magic 7
7 Generic TSQL Scripts to Troubleshoot SQL Performance Problems
"It's not a tool, which fixes a problem, but the fool using it!" (Jörg Stryk) The M7 bunch of scripts should help the EXPERIENCED Troubleshooter to quickly identify bottlenecks and to develop/implement appropriate solutions. "With great power comes great responsibility" (Uncle Ben) -
4
Jailer
Database Subsetter and Relational Data Browser
Database Subsetting and Relational Data Browsing Tool. Navigate bidirectionally through the database by following foreign-key-based or user-defined relationships. Exports consistent, referentially intact row-sets from relational databases. Removes data w/o violating integrity. Generates topologically sorted SQL-DML, hierarchically structured XML. and DbUnit datasets. -
Our Free Plans just got better! | Auth0You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
-
5
ZenTao project management software
Open source Scrum tool and an ALM solution
ZenTao is an open source Scrum tool for application development projects with features including Backlog Management✓ Sprint and task✓ bug tracking✓ Scrum✓ Waterfall✓ Roadmap✓ Burndown✓ Kanban✓ SaaS✓ Self Hosting✓ -
6
PHPCorrector
XSS and SQLi vulnerabilities corrrector for PHP web applications
PHPCorrector is a tool that scans your PHP code to find Cross-Site Scripting (XSS) and SQL Injection (SQLi) vulnerabilities. When a vulnerability is found, it is corrected automatically. -
7
Node.js chaos monkey
Extremly naughty chaos monkey for Node.js
node-chaos-monkey brings chaos engineering to Node.js by injecting controlled failures into running services to validate resilience. It lets teams rehearse real-world incidents—latency spikes, random process exits, resource exhaustion—and observe how circuits, retries, and backoff strategies behave. The tool is designed to be safe and configurable, enabling narrow blast radii and scheduled experiments during non-critical windows. It integrates naturally with staging or even carefully guarded... -
8
httest is a script based tool for testing and benchmarking web applications, web servers, proxy servers and web browsers. httest can emulate clients and servers in the same test script, very useful for testing proxys.
-
9
iSCSIsim is a powerful generic test tool for iSCSI targets. Its capabilities include SCSI command injection, error insertion, and recovery testing: all with built-in validation of test results.
-
Compliant and Reliable File Transfers Backed by Top Security CertificationsStop relying on non-certified, legacy file transfer tools that creak under the weight of modern security demands. Get full audit trails, advanced access controls and more supported by an award-winning team of experts. Start your free 25-day trial today.
-
10
Vulnerawa stands for vulnerable web application, though I think it should be renamed Vulnerable website. Unlike other vulnerable web apps, this application strives to be close to reality as possible. To know more about Vulnerawa, go here https://www.hackercoolmagazine.com/vulnerawa-vulnerable-web-app-for-practice/ See how to setup Vulnerawa in Wamp server. https://www.hackercoolmagazine.com/how-to-setup-vulnerawa-in-wamp-server/ To see how to set up a web app pen testing lab with...
-
11
TestArena - Test Management Tool
TestArena is a free tool for test management.
-
12
Ava: Testdata Xsl
generates Testdata on base of excel: creates xml,excel,csv,html,sql,+
this tool for test-data-generation receives an 'excel-sheet' as primary input. second important paramter is the 'number of test-records to produce'. The excel-data will be reused as long data is needed. This tool is hightly paramatrisazable by the use of 'xsl scripts'. data can be created, updated, modified and finally exported in a format of your choice Main Fuctions: (1) Generates Testdata (excel, xsl, xml) (2) Exports generated testdata in multiple formats (csv, excel, html, sql-insert, individual by xsl extension) (3) Collect all processed data in excel-files (4) plus: Xsl Executor, which let's you run xsl-scripts independently (5) plus: User Interface -
13
tSQLt - DB Unit Testing for SQL Server
Moved to tSQLt.org (Database Unit Testing for Microsoft SQL Server)
We are moving: Download the newest version directly at https://tSQLt.org -------------------------------------------------------------------------- tSQLt is a unit testing framework for Microsoft SQL Server. tSQLt is compatible with SQL Server 2005 (service pack 2 required) and above on all editions. tSQLt allows you to implement unit tests in T-SQL. This is important as you do not have to switch between various tools to create your code and your unit tests. tSQLt also provides the following features to make it easier to create and manage unit tests: * Tests are automatically run within transactions – this keeps tests independent and reduces any cleanup work you need * Tests can be grouped together within a schema – allowing you to organize your tests and use common setup methods * Output can be generated in plain text or XML – making it easier to integrate with a continuous integration tool -
14
sitecheck
Modular web site spider for web developers.
More than just a link checker, sitecheck is a website spider (also known as a crawler) which can assist with SEO by testing an entire site plus both inbound links from search engines and outbound links to other sites for the following issues: looping redirects (HTTP 301/302), broken links (HTTP 404), server errors (HTTP 500), spelling mistakes, low readability scores (using the Flesch Reading Ease test), missing/empty/duplicate meta tags, duplicate content, slow page speed, W3C validation errors and accessibility errors. Sitecheck can also spot some common causes of PCI compliance failure such as insecure content on secure pages, SQL injection/cross-site scripting (XSS) vulnerabilities, insecure encryption ciphers and open mail relays. Sources of information leakage such as email addresses and IP addresses in the headers or the page will be logged. Includes a separate module called domaincheck which checks the domain expiry date, SSL certificate expiry date and SPF records. -
15
wavsep
Web Application Vulnerability Scanner Evaluation Project
...Visit WAVSEP homepage to learn more: https://code.google.com/p/wavsep/ The project includes the following test cases: Path Traversal/LFI: 816 test cases (GET & POST) Remote File Inclusion (XSS via RFI): 108 test cases (GET & POST) Reflected XSS: 66 test cases, implemented in 64 jsp pages (GET & POST) Error Based SQL Injection: 80 test cases, implemented in 76 jsp pages (GET & POST) Blind SQL Injection: 46 test cases, implemented in 44 jsp pages (GET & POST) Time Based SQL Injection: 10 test cases, implemented in 10 jsp pages (GET & POST) -
16
TestMax
Frontend & Backend Automation Tool
TestMax is integrated Software Testing framework which can be used to test distributed system by developing rapid test cases using XML configuration in front and backend that talks to each other within the test framework. This tool can be used for Database, webservice, API, Junit, TestNg and Frontend including performance test. The main advantage of this TestMax architecture is separating test data configuration from test case run time environment. It reduces the maintenance of test cases... -
17
hwk
hwk is a tool used for wireless lan pentests
hwk is an easy-to-use application used to attack and discover wireless networks. It's providing various modes such as authentication/deauthentication flood, beacon and probe response fuzzing. -
18
Ingres Dynamic Playback is a tool to play back prerecorded SQL statements to do functional and stress testing on the Ingres Database. More information here: http://community.ingres.com/wiki/Dynamic_Playback
-
19
r4st
A database rapid application development tool
The r4st ("Our Forest") project is a set of tools to assist with the rapid development of a database application. It uses shell scripts to drop/add Postgresql database tables/views with data loaded from sql and csv files. This process allows users to apply changes then re-build the system. It is essentially a customizable database regression system. The base schema and data module represent a plant database intended for educational and scientific usage. -
20
jmint
jMINT - Java Mutation for Integration Testing
jMINT is a integration fault injection tool which identifies data exchanges across classes and inject faults along those path. It is primarily based on the idea of program analysis and code mutation. The cross boundary data exchanges are identified by performing data flow analysis using java byte code analysis and transformation framework-soot. Mutant injection is also done via the soot framework. jMINT tool can be used to measure the effectiveness of integration test suites. -
21
Java EE Two-Phase Commit Testkit
A Portable Thin Client & Server Pair for XA / 2PC Testing
A portable testing tool to validate the configuration of XA and two-phase commit for Java EE 6 Containers. The tool permits the stress-testing, performance characterization and correct transaction semantics of distributed transactions across Three XA resource managers by Exception Injection. The thin-client can be run from the command-line or inside the IDE. -
22
Genedator
Generator of sample data.
Need sample data for your database? Genedator is a tool that helps you to generate data for your database. Set of dynamically loaded generators allows you generating any combination of data regarding columns type and purpose. -
23
dbMonster is a tool which generates random test data and puts it into SQL database. It helps to test how an application can deal with large database.
-
24
The project moved to GitHub, https://github.com/aevdokimenko/tsqlunit TSQLUnit is a framework to write tests for applications written in Transact-SQL. It follows the tradition of the "xUnit" framework that is available for almost all programming languages.
-
25
SpaceMonkey is a Web application auditing tool. It can detect bugs or security flaws without using a knowledge database. It uses fault injection technics ('fuzzing') in order to reveal the flaws (SQL injection, XSS, File inclusion, command execution ).
