Sql Injection Python Packages

sqlmap

Automatic SQL injection and database takeover tool

bane

The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..

hickok

Reverse-shell handler & post-exploitation: multi-listener PTY console, payload generation, and a full SQL injection engine (union/boolean/time, native Tor). Python, no core deps.

ruoyi-scan

RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nuclei compatible. 若依专项漏洞扫描器

arcis

Inside-the-app security middleware for Node.js, Python, and Go. 20+ attack vectors. One install, three languages, MIT.

wshawk

Open source toolkit for WebSocket security testing, web application penetration testing, and stateful attack validation. It combines a CLI scanner, web dashboard, Electron desktop app, browser companion, and project-backed workflows for authorized security assessments.

breachsql

Fast SQL injection scanner with built-in exploitation — detect and extract in one command, across all major backends, with WAF evasion baked in.

fencer

Automated API security testing

black-widow

GUI based offensive penetration testing tool (Open Source)

polyglot-bug-hunter-x

Multimodal AI web bug hunter: sees, hears and reads a website while hunting bugs. 43 non-destructive payloads, CVSS v3.1 scoring, offline demo, CLI, Kaggle kernel.

queryshield-mcp

Secure SQL proxy for AI agents — AST safety, per-agent RLS, audit log, MCP-native.

deadwood-sec

A self-hosted, leveled web-security range (tutorial → impossible) — the practice town for wraith & hickok. Intentionally vulnerable; localhost only.

mcp-server-inject-bender

🎭 Inject Bender - Security Through Absurdity! Transform SQL injections into hiking boot ads. Skippie 📎 & Odin ⚡

piccolo-sql-guard

Static analysis tool for detecting unsafe raw SQL construction in Piccolo ORM projects

dorkeye

Automated Google Dorking Tool. Generates and runs advanced search queries for exposed files. It also test Vulns, Analyzes and extracts metadata

spyhunt

SpyHunt v4.0: A comprehensive Network Scanner & Vulnerability Assessment tool. Automate OSINT, Reconnaissance, and Bug Bounty hunting with advanced scanners (XXE, SSRF, SSTI, SQLi) plus Nuclei & Shodan integration. (Fork from @gotr00t0day)

sql-query-tagger

Static SQL query classifier and injection-risk analyzer for all RDS database engines.

sqlmap-tamper-framework

Modern WAF bypass tamper scripts for SQLMap targeting Cloudflare, AWS WAF, and Azure WAF using 2025 evasion techniques.

gloomproxy-sdk

Browse a target normally and watch the attack surface graph build itselfc — all correlated in real time. Then hit it with distributed scanner plugins, replay and fuzz interesting requests, and manage auth across the whole engagement from a single UI.

sqlinjector

Professional SQL injection testing framework for authorized security testing. Supports multiple injection types and database systems with intelligent detection and detailed reporting.

readonly-sql-guard

A provably read-only SQL guard for AI agents — drop it into any MCP server or database tool. Checks what a statement calls, not just its shape; measured against a public 28-attack benchmark. Postgres, MySQL, SQL Server, SQLite.

banelib

The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..

ddos-ripper

DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic