Automatic SQL injection and database takeover tool
☆45Nov 27, 2025Updated 11 months ago
Alternatives and similar repositories for sqlmap
Users that are interested in sqlmap are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A demo PHP application used to exercise SQL injection techniques in a safe, local Docker environment☆45Jun 3, 2024Updated 2 years ago
- ☆17Mar 9, 2023Updated 3 years ago
- A training course on Web Security, Exploit Development and Source Code Auditing from 2009.☆11Oct 7, 2026Updated 3 weeks ago
- A handy plugin for copying requests/responses directly from Burp, some extra magic included.☆13Oct 15, 2021Updated 5 years ago
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 7 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A tool to download program information from Bugcrowd, for use by researchers to compare programs they are eligible to participate in☆20Dec 22, 2022Updated 3 years ago
- Curated list of Meta (formerly Facebook) owned IT assets☆61Jul 20, 2025Updated last year
- This project is a Dockerized WordPress development environment with two configurations, one using Nginx and the other using Apache. It in…☆10May 29, 2025Updated last year
- IIS shortname scanner + bruteforce☆56Feb 18, 2024Updated 2 years ago
- This includes all the templates of nuclei collected from different sources☆18Dec 30, 2022Updated 3 years ago
- tool that generates bypasses for open redirects☆49Apr 18, 2022Updated 4 years ago
- ☆36Aug 2, 2022Updated 4 years ago
- A powerful Burp extension to make bounty rain☆13Feb 1, 2022Updated 4 years ago
- Burpsuite Plugin to detect Directory Traversal vulnerabilities☆27Jul 22, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Crawlex is a powerful Chrome extension designed to assist bug bounty hunters in their work by enabling easy crawling of all possible URLs…☆12May 28, 2023Updated 3 years ago
- ☆749Jun 26, 2024Updated 2 years ago
- My own Custom nuclei templates☆26Jun 23, 2026Updated 4 months ago
- A collection of one off hacks and simple scripts☆27Mar 21, 2023Updated 3 years ago
- A burp-suite plugin that extract all parameter names from in-scope requests☆29Nov 9, 2021Updated 4 years ago
- BetterBugBounty - Here tools are classic, bugs are hunted, and nostalgia is the ultimate weapon!☆30Feb 10, 2024Updated 2 years ago
- commands☆27Nov 5, 2020Updated 5 years ago
- Automated Recon Tool Installer☆16Jun 29, 2022Updated 4 years ago
- Python Duo Push API☆41Jul 21, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Filter and enrich a list of subdomains by level☆218Sep 25, 2023Updated 3 years ago
- ☆121May 25, 2023Updated 3 years ago
- Stay within program scope☆37Aug 17, 2022Updated 4 years ago
- ☆149Dec 23, 2022Updated 3 years ago
- Identify virtual hosts by similarity comparison☆142Mar 18, 2026Updated 7 months ago
- Nuclei Templates to reproduce Cracking the lens's Research☆132Jan 8, 2022Updated 4 years ago
- A path-normalization pentesting tool.☆153Apr 2, 2026Updated 7 months ago
- zwatcher is a lightweight bash script for monitoring sub/domains or a list of sub/domains and javascript files. It compares HTTP status c…☆21Nov 23, 2025Updated 11 months ago
- Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.☆133Jul 11, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A lightweight version of my bug bounty hunting framework designed to be run on Synack's LP+ machines.☆11Jul 11, 2023Updated 3 years ago
- For unpacking base64:ed "Save items"-content from Burp (From search + proxy history)☆54Feb 26, 2025Updated last year
- TProx is a fast reverse proxy path traversal detector and directory bruteforcer.☆30Sep 16, 2021Updated 5 years ago
- Fast Go-based XSS assessment toolkit☆20Mar 18, 2026Updated 7 months ago
- JsValidator is a tool created for validating the JS files after crawlling it from waybackurls☆22Mar 13, 2023Updated 3 years ago
- Electro-XSS , a buggy desktop app developed with the Electron framework.☆13Feb 10, 2022Updated 4 years ago
- Subdomain Monitor A production-ready subdomain monitoring system with both API and CLI interfaces.☆75Oct 26, 2026Updated last week