sqlmap
sqlmap.orgAutomatic SQL injection and database takeover tool
Securitysql-injectionpenetration-testingopen-sourcedatabase-securitycli-toolexploitvulnerability-scanning
About
sqlmap is an open source penetration testing tool that automates the detection and exploitation of SQL injection vulnerabilities in web applications. It supports a wide range of database management systems and SQL injection techniques, and can perform actions such as database fingerprinting, data extraction, file system access, and OS command execution. The tool is available via Git clone or direct download and is licensed under the GNU GPL v2.
Problem
Manually detecting and exploiting SQL injection vulnerabilities in database-backed applications is time-consuming and technically complex.
For
Security researchers and penetration testers
How it works
sqlmap automates the process of detecting SQL injection flaws using multiple injection techniques and a powerful detection engine, then exploits them to extract data or gain control of the database server.
Business model
open-source
Status
launched
Launched
2006