8071 Open source projects that are alternatives of or similar to Nosqlmap

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

使用SpringCloud和Spring WebFlux开发的学生作业管理系统服务端，前后端分离项目，微服务架构。支持Docker集群化部署，Redis集群化缓存，文件在线预览 压缩包预览 打包上传下载

macOS development environment setup: Easy-to-understand instructions with automated setup scripts for developer tools like Vim, Sublime Text, Bash, iTerm, Python data analysis, Spark, Hadoop MapReduce, AWS, Heroku, JavaScript web development, Android development, common data stores, and dev-based OS X defaults.

Go 学习、Go 进阶、Go 实用工具类、Go-kit ，Go-Micro 微服务实践、Go 推送

Damn Vulnerable Web Application (DVWA)

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

Automatic SQL injection with Charles and sqlmap api

RESTHeart - The REST API for MongoDB

mdserver (mac version, secondary development)

Strongly-typed MongoDB driver for Rust

Feed aggregator using Vert.x 3 (showcase)

基于EF Core的Code First模式的DotNetCore快速开发框架，其中包括DBContext、IOC组件autofac和AspectCore.Injector、代码生成器（也支持DB First）、基于AspectCore的memcache和Redis缓存组件，以及基于ICanPay的支付库和一些日常用的方法和扩展，比如批量插入、更新、删除以及触发器支持，当然还有demo。欢迎提交各种建议、意见和pr~

Multi Tool Subdomain Enumeration

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Automated hacking tool that will find leaked databases with 97.1% accurate to grab mail + password together from recent uploads from https://pastebin.com. Bruteforce support for spotify accounts, instagram accounts, ssh servers, microsoft rdp clients and gmail accounts

Work in progress...

All-in-one tool for managing vulnerability reports from AppSec pipelines

被动式漏洞扫描系统

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

记录自己编写、修改的部分工具

The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.

Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

基于 Vue + Element 的响应式后台模板

Pillage filesystems for sensitive information with Go.

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

An OSINT tool to gather information about the real owner of a phone number

A redis protocol compatible nosql, it support multiple storage engines as backend like Google's LevelDB, Facebook's RocksDB, OpenLDAP's LMDB, PerconaFT, WiredTiger, ForestDB.

Open-Source Security Architecture | 开源安全架构

C++ Driver for MongoDB

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

Player tracking for Asheron's Call

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Scripts I use during pentest engagements.

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

A Python-powered exploitation framework and botnet.

a persistent real-time key-value store, with the same redis protocol with powerful features

jSQL Injection is a Java application for automatic SQL database injection.

Python cluster client for the official redis cluster. Redis 3.0+.

Code and handouts for my JetBrains webcast recorded January 30, 2018

Django and MongoDB database connector

Machine Learning based Intrusion Detection Systems are difficult to evaluate due to a shortage of datasets representing accurately network traffic and their associated threats. In this project we attempt at solving this problem by presenting two taxonomies

Study Notes For Web Hacking / Web安全学习笔记

Netkiller Free ebook - 免费电子书

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

The Web Exploit Detector is a Node.js application used to detect possible infections, malicious code and suspicious files in web hosting environments

Aplicação que simula um banco digital, contendo a área do cliente e administrativa, permitindo depósitos e transferências entre contas do mesmo banco. | Application that simulates a digital bank, containing the customer and administrative areas, allowing deposits and transfers between accounts of the same bank.

A shell script that automatically performs a series of *NIX enumeration tasks.

Automatically brute force all services running on a target.

Simple Golang HTTPS/TLS Examples

🍏 Setup and tear down test fixtures with MongoDB.

🔪 Leak git repositories from misconfigured websites

zynix-Fusion is a framework that aims to centralize, standardizeand simplify the use of various security tools for pentest professionals.zynix-Fusion (old name: Linux evil toolkit) has few simple commands, one of which is theinit function that allows you to define a target, and thus use all the toolswithout typing anything else.

NoSQL data store using the SEASTAR framework, compatible with Redis

bug bounty hunters starter notes

Entropy Toolkit is a set of tools to provide Netwave and GoAhead IP webcams attacks. Entropy Toolkit is a powerful toolkit for webcams penetration testing.

This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown) and CVE-2017-5715 (Spectre) allows unprivileged processes to steal secrets from privileged processes. These attacks present 3 different ways of attacking data protection measures on CPUs enabling attackers to read data they shouldn't be able to. This tool is originally based on Microsoft: https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in

This repository is contains spring-boot 2 / spring framework 5 project examples. Using reactive programming model / paradigm and Kotlin