SQLmap

SQLmap is a powerful open-source penetration testing tool designed for automating the detection and exploitation of SQL injection vulnerabilities in database systems. It helps identify and exploit weaknesses in web applications by interacting with their back-end databases, retrieving sensitive information such as user credentials, database schemas, and more. SQLmap supports a wide range of database management systems, including MySQL, PostgreSQL, Microsoft SQL Server, Oracle, and SQLite, and offers multiple techniques for injection, such as boolean-based, time-based, error-based, UNION query-based, and stacked queries. The tool is highly customizable, with options to specify database types, injection points, and payloads, making it an essential asset for security professionals and ethical hackers aiming to uncover vulnerabilities and secure their applications.

Website | Docs

Install

Kali

sudo apt install sqlmap

All other Linux

sudo git clone --depth 1 https://github.com/sqlmapproject/sqlmap.git sqlmap-dev /opt/sqlmap
sudo ln -sf /opt/sqlmap/sqlmap.py /usr/local/bin/sqlmap