Topics / #sql-injection
SQL injection projects on GitHub
Detecting, exploiting, and preventing SQL injection flaws.
As of , the most-starred SQL injection projects on GitHub are sqlmap (38.7K stars), druid (28.2K stars) and SafeLine (22.8K stars). GitHub.Locker tracks 6 SQL injection repositories with 129.9K stars combined. The fastest-growing on October 19 was sqlmap, with +15 stars in a day.
Hot right now
Most stars gained in a day · Oct 19
+15sqlmap
sqlmapproject/sqlmap · ★ 38.7Ksqlmap is an open-source penetration testing tool that automates detecting and exploiting SQL injection flaws and taking over the underlying database server.
+13SafeLine
chaitin/SafeLine · ★ 22.8KSafeLine is a self-hosted web application firewall (WAF) and reverse proxy that protects your web apps from attacks and exploits by filtering and monitoring HTTP traffic.
+9DVWA
digininja/DVWA · ★ 13.9KDVWA (Damn Vulnerable Web Application) is a PHP/MariaDB web app that is deliberately full of security bugs, built as a legal practice target for security pros, students, and developers to learn web application security.
+2hacker101
Hacker0x01/hacker101 · ★ 14.6KHacker101 is a free online class for web and mobile security from HackerOne (the Hacker0x01 org), aimed at everyone from programmers curious about bug bounties to seasoned security professionals.
The all-time top
6 projects · by stars
- 38.7K
#1 · sqlmapproject/sqlmapsqlmap
sqlmap is an open-source penetration testing tool that automates detecting and exploiting SQL injection flaws and taking over the underlying database server.
- 28.2K
#2 · alibaba/druiddruid
Druid is an open-source, high-performance Java database connection pool and SQL parser built by Alibaba's DataWorks team. It combines a JDBC connection pool, a multi-dialect SQL parser/AST analyzer, a SQL firewall, and monitoring statistics into one library.
- 22.8K
#3 · chaitin/SafeLineSafeLine
SafeLine is a self-hosted web application firewall (WAF) and reverse proxy that protects your web apps from attacks and exploits by filtering and monitoring HTTP traffic.
- 4

hacker101
14.6KHacker0x01/hacker101 · SCSSHacker101 is a free online class for web and mobile security from HackerOne (the Hacker0x01 org), aimed at everyone from programmers curious about bug bounties to seasoned security professionals.
- 5

DVWA
13.9Kdigininja/DVWA · PHPDVWA (Damn Vulnerable Web Application) is a PHP/MariaDB web app that is deliberately full of security bugs, built as a legal practice target for security pros, students, and developers to learn web application security.
- 6

xray
11.8Kchaitin/xray · Vuexray is a security assessment tool built by Chaitin for scanning common web vulnerabilities and running custom PoCs against targets.
Related topics
Often tagged together