SQLMap
SQLMap is an open-source penetration testing tool that automates the detection and exploitation of SQL injection vulnerabilities. It supports MySQL, Oracle, PostgreSQL, MSSQL, SQLite, and more.
Module Sections
Injection Techniques
Understand the six SQL injection techniques SQLMap uses to extract data.
Tamper Scripts
Bypass WAFs and input filters with 50+ tamper scripts.
Detection & Enumeration
Detect injection points and enumerate databases, tables, and columns.
Database Enumeration
Extract database names, table structures, and column information.
Data Extraction
Dump database contents including usernames, passwords, and sensitive data.
OS Commands
Execute arbitrary OS commands and read/write files on vulnerable servers.
Common Flags
Comprehensive reference of every SQLMap flag with real-world usage.
Installation
Install SQLMap on Linux, macOS, Windows, and from source.
Usage Examples
Real-world SQLMap commands for each exploitation scenario.
Command Builder
Interactive tool to configure options and generate SQLMap commands.
Pro Tips
Expert advice on optimization, WAF bypass, and advanced techniques.
SQLMap Quiz
Test your knowledge with 15 multiple-choice questions on SQLMap.
SQLMap Lab
Hands-on exercises where you type SQLMap commands for different scenarios.
Quick Start
New to SQLMap? Start with these three sections in order:
Warning
SQLMap is a powerful offensive tool. Only use it against systems you own or have explicit written permission to test. Unauthorized use is illegal.