Tools

aboutcode-org/vulnerablecode

Open-source vulnerability database aggregating CVE data from multiple sources with a web UI and API. Maps vulnerabilities to specific software…

nim4/dbshield

Database firewall written in Go

m8sec/enumdb

Relational database brute force and post exploitation tool for MySQL and MSSQL

codelatteid/carina

Webshell, Virtual Private Server (VPS) and cPanel Database

kyos-public/keycloak-cve-2026-18963-hunt

Hunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak database

imbas007/poc-cve-2026-58048

Security research project

rapid7/metasploit-framework

Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

misp/misp

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

cve-search/cve-search

Local CVE/CPE vulnerability database with search, ranking, web interface, and API for offline vulnerability analysis and management.

sqlancer/sqlancer

Automated testing to find logic and performance bugs in database systems

ron190/jsql-injection

Automated SQL injection detection and exploitation tool for extracting database information from web applications, supporting multiple injection…

r0oth3x49/ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

codingo/nosqlmap

Automated NoSQL database enumeration and web application exploitation tool.

quentinhardy/msdat

MSDAT: Microsoft SQL Database Attacking Tool

stampery/mongoaudit

🔥 A powerful MongoDB auditing and pentesting tool 🔥

0xdea/exploits

Public exploit repository covering local privilege escalation, buffer overflows, and database exploits across Linux, Solaris, AIX, OpenBSD, Zyxel,…

trailofbits/not-going-anywhere

Intentionally vulnerable Golang programs exposing web, gRPC, and database/sql flaws for security training, vulnerability discovery, and remediation…