sqli-injection 开源项目推荐（17 个）

nemesida-waf /waf-bypass

Check your WAF before an attacker does

aaPanel /aaWAF

aawaf 是一款基于语义分析的Web应用防火墙

The404Hacking /sqlmap

Automatic SQL injection and database takeover tool.

JVBotelho /RASP.Net

Ultra-low latency RASP for .NET 10. High-performance security engine for high-throughput apps (FinTech/Gaming) with zero-allocation architecture.

xplacing /Zap

Simple SQLi Union Vulnerablity Scanner

tanujkumar2405 /SQLi-Detect

SQLi-Detect is a lightweight and effective SQL Injection Detection tool designed to identify and log potential SQL injection attempts in user inputs. It leverages regex pattern matching to detect common SQL injection payloads and provides multiple interfaces including a CLI tool and a REST API.

sylhetyhackvenger /HelloSpecter

HelloSpecter is a professional cybersecurity partners reconnaissance & vulnerability assessment tool for HelloTalk. It combines OSINT capabilities, security testing (authentication flaws, API exploitation, injection vulnerabilities), IP and multi-platform username hunting with automatic sanitization. Designed for security researchers only

JaanuNan /sqli-guard

AI-powered SQL injection detection & prevention tool using BERT and Stable Diffusion. Features real-time analysis, 3D attack visualization, query sanitization, and voice-to-SQL security.

9dl /AutoSQL

Fast Multi-Processing Auto SQL Vulnerability Scanner using SQLMap

XploitPoy-777 /Error-Sqli

A powerful multi-threaded scanner for detecting SQL and NoSQL injection vulnerabilities with advanced WAF bypass techniques and comprehensive reporting.

lucianoscarpaci /Pen-Testing-Live-Targets

Immerse yourself in a practical hacking exercise to gain valuable experience with prevalent security exploits. Explore six key vulnerabilities, including SQL injection, session hijacking, username enumeration, IDOR, XSS, and CSRF, for a comprehensive cybersecurity learning experience.

DhaswanthNag /Web-Vulnerability-Detection-Application

A web security project that uses Python, Django, and machine learning to detect common web vulnerabilities. It combines Regex-based rules with a CNN model to analyze payloads and provide vulnerability type, confidence, severity, and CVSS scores.

lorezvn /SQLi-Example

This repository showcases a web application designed to be vulnerable to SQL Injection attacks.

Fly3417 /7Pwn

🥷 Pwning Website Authorize. An interactive CLI framework to simulate the full kill chain: Recon, Exploit, Weaponize, and Post-Exploitation. Built to Understand.

eftha000 /Web-Security-Auditor

An automated DAST (Dynamic Application Security Testing) framework for web application auditing. Features multi-threaded passive header analysis, active multi-vector parameter fuzzing for SQLi/XSS detection, and an integrated security knowledge base for executive reporting.

TribuCibernetica /blind-sqli-extractor

该项目在 GitHub 上没有填写描述

FeBalla /sql-injection-demo

Interactive demo that shows how SQL injection works and why parameterized queries stop it, against real Postgres and BigQuery databases.