sql-injection

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。

Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.

Database firewall written in Go

[VscanPlus内外网漏洞扫描工具]已更新HW热门漏洞检测POC。基于veo师傅的漏扫工具vscan二次开发的版本，端口扫描、指纹检测、目录fuzz、漏洞扫描功能工具，批量快速检测网站安全隐患。An open-source, cross-platform website vulnerability scanning tool that helps you quickly detect website security vulnerabilities.

High-performance SQL parser, formatter, linter & security scanner for Go - 1.5M+ ops/sec, multi-dialect, zero-copy, race-free

SQL injection via bruteforced MD5 hash reflection of random strings

libinjection is a Golang port of the libinjection(https://github.com/client9/libinjection)

Contraband filtering reverse proxy for plain http and SSL.

Zero-dependency Web Application Firewall in Go. Single binary. Three deployment modes. Tokenizer-based detection.

Pen Hunter is a comprehensive vulnerability scanning tool designed for penetration testers, security researchers and bug bounties. it automates the process of collecting subdomains and URLs and tests them for various vulnerabilities including XSS, SQL Injection, Local File Inclusion, Open Redirect, Server-Side Request Forgery, CSRF, and RCE.

gosqli is a fast and simple tool for detecting blind SQL injection vulnerabilities. It supports scanning URLs with custom payloads, parallel requests, and response time-based verification.

Automated SQL Injection written in Golang

🔍 Detect and exploit SQL injection vulnerabilities with SQLiGo, a fast and reliable tool built for security professionals and penetration testers.

malstring is a lightweight Go library that detects malicious or unsafe strings such as SQL injection, command injection, XSS, path traversal, and other attack patterns. It provides fast, pattern‑based threat classification to help secure user input in web services, APIs, and backend applications.

Fast Multi-Processing Auto SQL Vulnerability Scanner using SQLMap

CWE-aware defense-in-depth middleware for Go GraphQL APIs

Authorized-use security assessment pipeline: subdomain enum, port/service fingerprinting, TLS/header checks, sensitive-path & XSS/SQLi detection, CVE correlation, and takeover detection, with an interactive HTML report.

🛡️ Single-binary, ML-assisted Web Application Firewall in Go — signature engine, actor tracking, DDoS escalation, honeypots. No sidecars.

🛡️ Autonomous SQL injection pipeline — crawls, probes, confirms with AI, exploits with sqlmap, reports in HTML/JSON/SARIF. Built for authorized red teams. One command, full database. Go · OpenRouter AI · chromedp · MCP