SQLi to RCE Escalation Script
Multi-DB SQLi detection (MySQL, MSSQL, PostgreSQL, Oracle, SQLite) Error-based and time-based detection MySQL RCE: INTO OUTFILE webshell, UDF exploitation MSSQL
Arsenal
Professional offensive security tools & exploit frameworks
98
Tools
12
Categories
XSS to Account Takeover Toolkit
6 cookie stealer variants (script, img, svg, fetch, xhr, event) Keylogger injection Full session hijack (cookies + localStorage + CSRF tokens) Phishing overlay
SSTI Payload Generator
8 template engines: Jinja2, Twig, Freemarker, Velocity, Mako, ERB, Smarty, Pebble Automatic engine detection Multiple RCE payloads per engine with WAF bypass va