Sqlmap

Purpose

Use this skill only after manual triage suggests a credible injection candidate and the rules of engagement allow controlled validation.

Phase Fit

• Primary: Validation and Controlled Impact Demonstration
• Secondary: Vulnerability Analysis, Retest and Closure

Use When

• Need to validate a likely SQL injection issue with the lowest safe settings.
• Need to replay a captured request during a controlled retest.
• Need a repeatable proof path for an already triaged injection candidate.

Avoid When