exploiting-sql-injection-with-sqlmap
Warn
Audited by Socket on Apr 6, 2026
1 alert found:
SecuritySecurityscripts/agent.py
MEDIUMSecurityMEDIUM
scripts/agent.py
This module is not a passive library; it is an offensive automation harness that executes sqlmap against a user-supplied target and can enumerate databases/tables and dump table contents, then persist results to disk. It trusts a locally discovered sqlmap binary without integrity checks and forwards sensitive attacker-controlled inputs (including cookie and tamper). No obfuscation is present, but the capability set is high-risk and could directly facilitate unauthorized exploitation or data extraction if included in a larger package.
Confidence: 82%Severity: 86%
Audit Metadata