sqlmap
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of back-end database servers. It comes with a broad range of features, from database fingerprinting to fetching data from the DB and even accessing the underlying file system and executing OS commands via out-of-band connections. The authors recommend using the development release from their Subversion repository. For downloads and more information, visit the sqlmap homepage.
- Popularity
- #30, new!
- Latest release
- 0.9
- April 11, 2011 (13 years, 8 months ago)
- Links
- Rating
- ★★★★½ (9)
★★★★★78% ★★★★11% ★★★11% ★★0% ★0%
this is for sure a great SQLi tool. it's extremely powerful, easy to use and free!
A very useful tool when you need to test your website security! Very useful and stable!
Yeah sqlmap is great if you're not doing anything blind. then it's a son of a bitch and God forbid you ask that dude over at git hub because he's a prick and doesn't tend to be particularly helpful. my results with it have been meh.
sqlmap is very awesome tool. I used it so many times for SQLi and dump databases!
We have used sqlmap for our oscommerce based online store. The tool really helped us to find sql injections and figure out the root issues.
**********good tool i crash alot of sites LOL!!!**************
This is my tool of choice when I have to exploit SQL injection. It works perfectly in different scenarios. I strongly recommend it.
This is my tool of choice when I have to exploit SQL injection. It works perfectly in different scenarios. I strongly recommend it.
Great tool. Also my first choice for testins sql injection.
Really great tool. In cases when I need to exploit a SQL injection vulnerable page this is always my first choice.
sqlmap is an incredible tool. As soon as I spot a potential SQL injection vulnerability, I run sqlmap. It figures out so many things all by itself, which impresses me the most and I dumped several databases with it in pentests already.