SQLMap SQL Injection Tool

Detect SQL injection vulnerabilities and extract databases using sqlmap.

Tool Status

• Tool installed: !command -v sqlmap > /dev/null 2>&1 && echo "YES -- $(sqlmap --version 2>/dev/null | head -1)" || echo "NO -- Install: brew install sqlmap (macOS) | apt install sqlmap (Debian/Ubuntu)"
• Wrapper scripts available: !test -f scripts/sqlmap/test-all-parameters.sh && echo "YES -- use wrapper scripts for structured JSON output" || echo "NO -- using standalone mode with direct commands"

Mode: Wrapper Scripts Available

If wrapper scripts are available (shown as YES above), prefer these commands. They provide structured JSON output and educational context.

Database Extraction

• bash scripts/sqlmap/dump-database.sh <target-url> -j -x -- Enumerate and extract database contents via SQL injection

Parameter Testing

• bash scripts/sqlmap/test-all-parameters.sh <target-url> -j -x -- Test all parameters in an HTTP request for SQL injection