一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

Web-Security-Learning

The LAZY script will make your life easier, and of course faster.

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

hack tools

All in One CRACKER911181's Tool. This Tool For Hacking and Pentesting. 🎭

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.

A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning

JAVA 漏洞靶场 (Vulnerability Environment For Java)

基于Burp插件开发打造渗透测试自动化

WEB SERVICE SECURITY ASSESSMENT TOOL

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

Official Kali Linux tool to check all urls of a domain for SQL injections :)

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:

Bypass WAF SQL Injection SQLMAP

SQL Injection Scout 是一个用于 Burp Suite 的扩展，专为帮助安全研究人员和开发人员检测和分析 SQL 注入漏洞而设计。该扩展提供了丰富的配置选项和直观的用户界面，便于用户自定义扫描和分析过程。

Using this script, you can enumerate Usernames and passwords of Nosql(mongodb) injecion vulnerable web applications.

SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.

OWASP PTK - application security browser extension.